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Abstract. We give some methods for computing equations for certain 
Shimura curves, natural maps between them, and special points on them. 
We then illustrate these methods by working out several examples in 
varying degrees of detail. For instance, we compute coordinates for all 
the rational CM points on the curves X*(l) associated with the quater- 
nion algebras over Q ramified at {2,3}, {2,5}, {2,7}, and {3,5}. We 
conclude with a list of open questions that may point the way to further 
computational investigation of these curves. 



1 Introduction 

1.1 Why and how to compute with Shimura curves 

The classical modular curves, associated to congruence subgroups of PSL 2 (Q), 
have long held and repaid the interest of number theorists working theoreti- 
cally as well as computationally. In the fundamental paper [S2] Shimura defined 
curves associated with other quaternion algebras other over totally real number 
fields in the same way that the classical curves are associated with the algebra 
M2(Q) of 2 x 2 matrices over Q. These Shimura curves are now recognized as 
close analogues of the classical modular curves: almost every result involving the 
classical curves generalizes with some more work to Shimura curves, and indeed 
Shimura curves figure alongside classical ones in a key step in the recent proof 
of Fermat's "last theorem" [Ri]. 

But computational work on Shimura curves lags far behind the extensive 
effort devoted to the classical modular curves. The 19th century pioneers inves- 
tigated some arithmetic quotients of the upper half plane which we now recog- 
nize as Shimura curves (see for instance [F1,F2]) with the same enthusiasm that 
they applied to the PSL2(Q) curves. But further inroads proved much harder 
for Shimura curves than for their classical counterparts. The PSL^Q) curves 
parametrize elliptic curves with some extra structure; the general elliptic curve 
has a simple explicit formula which lets one directly write down the first few mod- 
ular curves and maps between them. (For instance, this is how Tate obtained the 
equations for the first few curves Xi(iV) parametrizing elliptic curves with an 
./V-torsion point; see for instance [Kn, pp. 145-148].) Shimura showed that curves 
associated with other quaternion algebras also parametrize geometric objects, 
but considerably more complicated ones (abelian varieties with quaternionic en- 
domorphisms); even in the first few cases beyond M2(Q), explicit formulas for 
these objects were obtained only recently [HM], and using such formulas to get 
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at the Shimura curves seems a most daunting task. Moreover, most modern com- 
putations with modular curves (e.g. [C,E5]) sidestep the elliptic interpretation 
and instead rely heavily on g-expansions, i.e. on the curves' cusps. But arith- 
metic subgroups of PSL 2 (R) other than those in PSL 2 (Q) contain no parabolic 
elements, so their Shimura curves have no cusps, and thus any method that 
requires g-expansions must fail. 

But while Shimura curves pose harder computational problems than clas- 
sical modular curves, efficient solutions to these problems promise great bene- 
fits. These curves tempt the computational number theorist not just because, 
like challenging mountainpeaks, "they're there", but because of their remarkable 
properties, direct applications, and potential for suggesting new ideas for theo- 
retical research. Some Shimura curves and natural maps between them provide 
some of the most interesting examples in the geometry of curves of low genus; 
for instance each of the five curves of genus g € [2, 14] that attains the Hurwitz 
bound 84(g — 1) on the number of automorphisms of a curve in characteris- 
tic zero is a Shimura curve. Shimura curves, like classical and Drinfcld modular 
curves, reduce to curves over the finite field F q 2 of q 2 elements that attain the 
Drinfeld-Vladut upper bound (q — 1 + o(l))g on the number of points of a curve 
of genus g — > oo over that field [13] . Moreover, while all three flavors of modular 
curves include towers that can be given by explicit formulas and thus used to 
construct good error-correcting codes [Gol,Go2,TVZ], only the Shimura curves, 
precisely because of their lack of cusps, can give rise to totally unramified tow- 
ers, which should simplify the computation of the codes; we gave formulas for 
several such towers in [E6] . Finally, the theory of modular curves indicates that 
CM (complex multiplication) points on Shimura curves, elliptic curves covered 
by them, and modular forms on them have number-theoretic significance. The 
ability to efficiently compute such objects should suggest new theoretical results 
and conjectures concerning the arithmetic of Shimura curves. For instance, the 
computations of CM points reported in this paper should suggest factorization 
formulas for the difference between the coordinates of two such points analo- 
gous to those of Gross and Zagier [GZ] for j-invariants of elliptic curves, much 
as the computation of CM values of the Weber modular functions suggested 
the formulas of [YZ]. Also, as in [GS], rational CM points on rational Shimura 
curves with only three elliptic points (i.e. coming from arithmetic triangle groups 
G P ,q,r) yield identities A + B = C in coprime integers A, B, C with many re- 
peated factors; we list the factorizations here, though we found no example in 
which A,B,C are perfect p, q, r-th powers, nor any new near-record ABC ra- 
tios. Finally, CM computations on Shimura curves may also make possible new 
Heegner-point constructions as in [E4]. 

So how do we carry out these computations? In a few cases (listed in [JL]), 
the extensive arithmetic theory of Shimura curves has been used to obtain ex- 
plicit equations, deducing from the curves' p-adic uniformizations Diophantine 
conditions on the coefficients of their equations stringent enough to determine 
them uniquely. But we are interested, not only in the equations, but in modu- 
lar covers and maps between Shimura curves associated to the same quaternion 
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algebra, and in CM points on those curves. The arithmetic methods may be 
able to provide this information, but so far no such computation seems to have 
been done. Our approach relies mostly on the uniformization of these curves qua 
Ricmann surfaces by the hyperbolic plane, and uses almost no arithmetic. This 
approach is not fully satisfactory either; for instance it probably cannot be used 
in practice to exhibit all natural maps between Shimura curves of low genus. But 
it will provide equations for at least a hundred or so curves and maps not pre- 
viously accessible, which include some of the most striking examples and should 
provide more than enough data to suggest further theoretical and computational 
work. 

When a Shimura curve C comes from an arithmetic subgroup of PSL 2 (R) 
contained in a triangle group G p . q . r} the curve H/G Pi q ir has genus 0, and C is 
a cover of that curve branched only above three points, so may be determined 
from the ramification data. (We noted in [E5, p. 48] that this method was avail- 
able also for classical modular curves comings from subgroups of PSL 2 (Z) = 
^2,3,00, though there better methods are available thanks to the cusp. Sub- 
groups of PSL 2 (R) commensurate with 1 but not contained in G p , 9 , r may be 
handled similarly via the common subgroup of finite index.) The identification 
of H/Gp iq . r with P 1 is then given by a quotient of hypergeometric functions on 
P 1 , which for instance lets us compute the P 1 coordinate of any CM point on C 
as a complex number to high precision and thus recognize it at least putatively 
as an algebraic number. 

Now it is known [T] that only nineteen commcnsurability classes of arith- 
metic subgroups of PSL 2 (R) contain a triangle group. These include some of the 
most interesting examples — for instance, congruence subgroups of arithmetic 
triangle groups account for several of the sporadic "arithmetically exceptional 
functions" (rational functions f(X) e Q(X) which permute P 1 (F p ) for infinitely 
many primes p) of [Mii] ; but an approach that could only deal with those nine- 
teen classes would be limited indeed. When there are more than three elliptic 
points, a new difficulty arises: even if C — TL/Q still has genus 0, we must first 
determine the relative locations of the elliptic points, and to locate other CM 
points we must replace the hypergeometric functions to solutions of more general 
"Schwarzian differential equations" in the sense of [II]. We do both by in effect 
using nontrivial elements of the "commensurator" of the group G € PSL 2 (R), 
i.e. transformations in PSL 2 (R) which do not normalize G but conjugate G to 
a group commensurable with G. Ihara had already used these commensurators 
in [II] theoretically to prove that both C and its Schwarzian equation are defined 
over a number field, but this method has apparently not been actually used to 
compute such equations until now. 

1.2 Overview of the paper 

We begin with a review of the necessary definitions and facts on quaternion 
algebras and Shimura curves, drawn mostly from [S2] and [V]. We then give 

1 Recall that two subgroups H, K of a group G are said to be commensurate if H n K 
is a subgroup of finite index in both H and K. 



4 Noam D. Elkics 



extended computational accounts of Shimura curves and their supersingular and 
rational CM points for the two simplest indefinite quaternion algebras over Q 
beyond the classical case of the matrix algebra M 2 (Q), namely the quaternion 
algebras ramified at {2,3} and {2,5}. In the final section we more briefly treat 
some other examples which illustrate features of our methods that do not arise in 
the {2, 3} and {2, 5} cases, and conclude with some open questions suggested by 
our computations that may point the way to further computational investigation 
on these curves. 
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2 Review of quaternion algebras over Q and their 
Shimura curves 

2.1 Quaternion algebras over Q; the arithmetic groups -T(l) and 

r*(i) 

Let K be a field of characteristic zero; for our purposes K will always be a 
number field or, rarely, its localization, and usually the number field will be Q. 
A quaternion algebra over if is a simple associative algebra A with unit, con- 
taining K, such that K is the center of A and dim^ A = 4. Such an algebra 
has a conjugation a <-> a, which is a AT-linear anti-involution (i.e. a = a and 
aTa~2 — a,2ai hold identically in A) such that a = a <=> a e K . The trace and 
norm are the additive and multiplicative maps from A to AT defined by 

tr(a) = a + a, N(o) — aa = aa; (I) 

every a € A satisfies its characteristic equation 



a 2 - (tr(a))a + N(a) = 0. 



(2) 
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The most familiar example of a quaternion algebra is M 2 (K), the algebra of 
2x2 matrices over K, and if K is algebraically closed then M 2 (K) is the only 
quaternion algebra over K up to isomorphism. The other well-known example 
is the algebra of Hamilton quaternions over R. In M 2 (K) the trace is the usual 
trace of a square matrix, so the conjugate of a € M 2 (K) is tr(a)/2x2 — a, and 
the norm is just the determinant. Any quaternion algebra with zero divisors is 
isomorphic with M 2 (K). An equivalent criterion is that the algebra contain a 
nonzero element whose norm and trace both vanish. Now the trace-zero elements 
constitute a if-subspace of A of dimension 3, on which the norm is a homogeneous 
quadric; so the criterion states that A = M 2 (K) if and only if that quadric 
has nonzero if-rational points. The Hamilton quaternions have basis l,i,j,k 
satisfying the familiar relations 

i 2 = j 2 = k 2 = 1, ij = -ji = k, jk = -kj = i, ki = -ik = j; (3) 

the conjugates of 1, i, j, k are 1, —i, —j, — k, so a Hamilton quaternion a% + a 2 i + 
a 3.j + a ik has trace 2ai and norm a\ + a 2 + a\ + a\. Thus the Hamilton 
quaternions over K are isomorphic with M 2 (K) if and only if —1 is a sum of 
two squares in K . 

In fact it is known that if K = R then every quaternion algebra over K 
is isomorphic with either M 2 (R) or the Hamilton quaternions. In general if K 
is any local field of characteristic zero then there is up to isomorphism exactly 
one quaternion algebra over K other than M 2 (K) — with the exception of the 
field of complex numbers, which being algebraically closed admits no quaternion 
algebras other than M 2 (C). If A is a quaternion algebra over a number field K 
then a finite or infinite place v of K is said to be ramified in A if A <g> K v is not 
isomorphic with M 2 (K V ). There can only be a finite number of ramified places, 
because a nondegenerate quadric over K has nontrivial local zeros at all but 
finitely many places of K. A less trivial result (the case K = Q is equivalent to 
Quadratic Reciprocity) is that the number of ramified places is always even, and 
to each finite set of places S of even cardinality containing no complex places 
there corresponds a unique (again up to isomorphism) quaternion algebra over K 
ramified at those places and no others. In particular an everywhere unramificd 
quaternion algebra over K must be isomorphic with M 2 {K). 

An order in a quaternion algebra over a number field (or a non- Archimedean 
local field) K is a subring containing the ring Ok of if-integers and having 
rank 4 over Ok- For instance M 2 (Ok) and OK[i,j] are orders in the matrix and 
quaternion algebras over K. Any order is contained in at least one maximal order, 
that is, in an order not properly contained in any other. Examples of maximal 
orders are M 2 (O k ) & M 2 (K) and the Hurwitz order Z[l,i, j, (1 + i +j + fc)/2] 
in the Hamilton quaternions over Q. It is known that if K has at least one 
Archimedean place at which A is not isomorphic with the Hamilton quaternions 
then all maximal orders are conjugate in A. 
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Now let 2 K = Q. A quaternion algebra A/Q is called definite or indefinite 
according as A <g> R is isomorphic with the Hamilton quaternions or M%(¥{), 
i.e. according as the infinite place is ramified or unramificd in A. [These names 
allude to the norm form on the trace-zero subspace of A, which is definite in 
the former case, indefinite in the latter.] We shall be concerned only with the 
indefinite case. Then £ consists of an even number of finite primes. Fix such a 
E and the corresponding quaternion algebra A. Let O be a maximal order in A; 
since A is indefinite, all its maximal orders are conjugate, so choosing a different 
maximal order would not materially affect the constructions in the sequel. 

Let 0* be the group of units of norm 1 in C We then define the following 
arithmetic subgroups of A*/Q*: 

r(l) := Oi/{±l}, (4) 
T*(l) := {[a] e A*/Q* : aO = Oa, N(o) > 0}. (5) 

[In other words r*(l) is the normalizer of T(l) in the positive-norm subgroup of 
A*/Q*. Takeuchi [T] calls these groups rW(A, O x ) and rW(A, d); we use T(l) 
to emphasize the analogy with the classical case of PSL 2 (Z), which makes _T*(1) 
a natural adaptation of Takeuchi's notation. Vigncras [V, p. 121ff.] calls the same 
groups r and G, citing [Mi] for the structure of their quotient.] As noted, -T(l) 
is a normal subgroup of r*(l). In fact r*(l) consists of the classes mod Q* of 
elements of O whose norm is Ilpes' P f° r som e (possibly empty) subset £'C£, 
and r*(l)/_T(l) is an elementary abelian 2-group with #17 generators. 

2.2 The Shimura modular curves X(l) and X*{1) 

The group -T(l), and thus any other group commensurable with it such as -T*(l), 
is a discrete subgroup of (A® R)+/R* (the subscript "+" indicating positive 
norm), with compact quotient unless S = 0, and of finite covolumc even in that 
case. Since A®H = M 2 (R), the group {A®Tl)* + /~R* is isomorphic with PSL 2 (R) 
and thus with Aut(W), the group of automorphisms of the hyperbolic upper half 
plane 

H:={zeC: Im(z) > 0}. (6) 

Explicitly, a unimodular matrix ±(°^) acts on H. via the fractional linear trans- 
formation z i > (az + b)/(cz + d). We may define the Shimura curves X{\) and 
X*(l) qua compact Riemann surfaces by 

X{1) := H/T(l), X*(l) := H/T*(l). (7) 

2 Most of our examples, including the two that will occupy us in the next two sections, 
involve quaternion algebras over Q. In [S2] Shimura associated modular curves to 
a quaternion algebra over any totally real number field K for which the algebra is 
ramified at all but one of the infinite places of K. Since the special case K = Q 
accounts for most of our computations, and is somewhat easier to describe, we limit 
our discussion to quaternion algebras over Q from here until section 5.3. At that 
point we briefly describe the situation for arbitrary K before working out a couple 
of examples with [K : Q] >1. 
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[More precisely, the Riemann surfaces are given by (7) unless S = 0, in which 
case the quotient only becomes compact upon adjoining a cusp.] The hyper- 
bolic area of these quotients of H is given by the special case k = Q of a 
formula of Shimizu [SI, Appendix], quoted in [T, p. 207]. Using the normaliza- 
tion 7T _1 JJ dxdy/y 2 for the hyperbolic area (with z = x + iy; this normalization 
gives an ideal triangle unit area), that formula is 

Area(A'(l)) = in(P- 1 )' ( 8 ) 

pes 

from which 

A rea(**(D) = (j ^^ Area(*(l)) = \ JQ ^ (9) 

It is known (see for instance Ch.IV:2,3 of [V] for the following facts) that, 
for any discrete subgroup r C PSL 2 (R) of finite covolume, the genus of Ti/T 
is determined by its area together with with information on elements of finite 
order in r. All finite subgroups of r are cyclic, and there are finitely many such 
subgroups up to conjugation in _T. There are finitely many points Pj olTL/T 
with nontrivial stabilizer, and the stabilizers are the maximal nontrivial finite 
subgroups of r modulo conjugation in r . If the order of the stabilizer of Pj is 
ej then Pj is said to be an "elliptic point of order e/'. Then if H/T is compact 
then its genus g = giTi/r) is given by 

2</- 2 = Area(W/r) -^(1-1). (10) 

3 63 

Moreover r has a presentation 

g 

r=(a 1 ,...,a g ,p 1 ,...,(3 g ,s j \s'j i = 1, ^8 j J[[a i ,0 i ] = l), (11) 

j i=l 

in which Sj generates the stabilizer of a preimage of Pj in TL and rotates a 
neighborhood of that preimage by an angle 2n/ej (i.e. has derivative e 27 ™/ £j at its 
fixed point), and [ot,0\ is the commutator ot(3oT x f3~ l . [This group is sometimes 
called (g;e\,..., e g ).] If JijP is not compact then we must subtract the number 
of cusps from the right-hand side of (10) and include a generator Sj of r of 
infinite order for each cusp, namely a generator of the infinite cyclic stabilizer of 
the cusp. This generator is a "parabolic element" of PSL2(R), i.e. a fractional 
linear transformation with a single fixed point; there are two conjugacy classes 
of such elements in PSL2(R), and Sj will be in the class of z i— > z + 1. We assign 
ej = oo to a cusp. For both finite and infinite ej, the trace and determinant of Sj 
are related by 

Tr 2 ( Sj ) = 4 cos 2 — det(sj)- (12) 
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Since we are working in quaternion algebras over Q, this means that ej E 
{2,3,4,6,oo}, and only 2,3, 00 are possible if r C r(l). Moreover ej = 00 
occurs only in the classical case S = 0. 

We shall need to numerically compute for several such r the identification 
of H/r with an algebraic curve X/C, i.e. to compute the coordinates on X of 
a point corresponding to (the .T-orbit of) a given z e H, or inversely to obtain 
z corresponding to a point with given coordinates. In fact the two directions 
are essentially equivalent, because if we can efficiently compute an isomorphism 
between two Riemann surfaces then we can compute its inverse almost as easily. 
For classical modular curves one usually uses q-expansions to go from z to ratio- 
nal coordinates; but this method is not available for our groups r, which have no 
parabolic (ej — 00) generator. We can, however, still go in the opposite direction, 
computing the map from X to H/r by solving differential equations on X. The 
key is that while the function z on X is not well defined due to the r ambiguity, 
its Schwarzian derivative is. In local coordinates the Schwarzian derivative of a 
nonconstant function z = z(() is the meromorphic function defined by 

S c (z).--4z z = —2 • (13) 

This vanishes if and only if z is a fractional linear transformation of £. Moreover 
it satisfies a nice "chain rule" : if £ is in turn a function of r\ then 

dC 2 



S " ( * ) = UU s d*) + Sn(C)- ( 14 ) 

Thus if we choose a coordinate ( on I then S^(z) is the same for each lift 
of z from Ti/r to H, and thus gives a well-defined function on the complement 
in X of the elliptic points; changing the coordinate from ( to r/ multiples this 
function by (d(/dr]) 2 and adds a term S v ((^) that vanishes if £ is a fractional 
linear transformation of r\. In particular if X has genus and we choose only 
rational coordinates (i.e. 77, ( are rational functions of degree 1) then these terms 
S V (Q always vanish and S^(z) d( 2 is a well-defined quadratic differential <r on X . 
Near an elliptic point £0 of index ej, the function z has a branch point such 
that (z — z )/(z — zq) is (( — (o) 1 ^ times an analytic function; for such z 
the Schwarzian derivative is still well-defined in a neighborhood of Co but has 
a double pole there with leading term (1 — eJ 2 )/(( — (o) 2 [ or (1 — e J 2 )/( 2 if 
Co = 00 — note that this too has a double pole when multiplied by d£ 2 ]. So 
a = S^(z) d( 2 is a rational quadratic differential on X, regular except for double 
poles of known residue at the elliptic points, and independent of the choice of 
rational coordinate when X has genus 0. Knowing a we may recover z from the 
differential equation 

S c (z)=a/dt 2 , (15) 

which determines z up to a fractional linear transformation over C, and can 
then remove the ambiguity if we know at least three values of z (e.g. at elliptic 
points, which are fixed points of known elements of r). 
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Because S^(z) is invariant under fractional linear transformations of z, the 
third-order nonlinear differential equation (15) can be linearized as follows (see 
e.g. [II, §1-5]). Let (/i, f 2 ) be a basis for the solutions of the linear second-order 
equation 

/" = af + bf (16) 

for some functions a((),b((). Then z := /1//2 is determined up to fractional 
linear transformation, whence S^(z) depends only on a,b and not the choice of 
basis. In fact we hnd, using either of the equivalent definitions in (13), that 

5 c (/i// 2 )=2^-a 2 -46. (17) 

Thus if a is any rational function and b — ~a/4d( 2 + a'/2 — a 2 /4 then the solu- 
tions of (15), and thus a map from X to TC/T, are ratios of linearly independent 
pairs of solutions of (16). In the terminology of [II], (16) is then a Schwarzian 
equation for H/T. We shall always choose a so that ad( has at most simple 
poles at the elliptic points and no other poles; the Schwarzian equation then has 
regular singularities at the elliptic points and no other singularities. The most 
familiar example is the case that r is a triangle group, i.e. X has genus and 
three elliptic points (if g = there must be at least three elliptic points by (10)). 
In that case a is completely determined by its poles and residues: if two different 
cr's were possible, their difference would be a nonzero quadratic differential on P 1 
with at most three simple poles, which is impossible. If we choose the coordinate 
on X that puts the elliptic points at 0, 1, 00, and require that a be chosen of the 
form a = Co/( + Ci/(( — 1) so that b has only simple poles at 0, 1, then there 
are four choices for (Co, Ci), each giving rise to a hypergeometric equation upon 
multiplying (16) by £(1 — C) : 

C(l - C)/" = [(a + 0+ 1)C - l]f + a(3f. (18) 

Here a, (i, 7 are related to the indices ei, e 2 , es at £ = 0, 1, 00 by 

-=±(1-7), -=±(7- a- /J), -=±(a-0); (19) 
ei e 2 e 3 

then F(a, j3\ 7; £) and (1 — C,)^F(a — 7 + 1, (3 — 7 + 1; 2 — 7; £) constitute a basis 
for the solutions of (16), where F = 2 F\ is the hypergeometric function defined 
for ICI < 1 by 

OO 

F(a,(3; T ,0 ■= E 

n=Q 

and by similar power series in neighborhoods of ( = 1 and ( = 00 (sec for 
instance [GR, 9.10 and 9.15]). In general, knowing a we may construct and 
solve a Schwarzian equation in power series, albeit series less familiar than 2-F1, 
and numerically compute the map X — > H/T as the quotient of two solutions. 
But once r is not a triangle group — that is, when X has more than three 



n 

_fc=0 



(a + k)(P + k) 
(7 + fe) 



(20) 
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elliptic points or positive genus — the elliptic points and their orders no longer 
determine a but only restrict it to an afhne space of finite but positive dimension. 
In general it is a refractory problem to find the "accessory parameters" that tell 
where a lies in that space. If P is commensurable with a triangle group r' then 
we obtain a from the quadratic differential on Ti/r' via the correspondence 
between that curve and H/T; but this only applies to Shimura curves associated 
with the nineteen quaternion algebras listed by Takeuchi in [T], including only 
two over Q, the matrix algebra and the algebra ramified at {2,3}. One of the 
advances in the present paper is the computation of a for some arithmetic groups 
not commensurable with any triangle group. 

We now return to the Shimura curves X(l), X*(l) obtained from arithmetic 
groups r = r(l), r*(l). These curves also have a modular interpretation that 
gives them the structure of algebraic curves over Q. To begin with, X(l) is 
the modular curve for principally polarized abelian surfaces (ppas) A with an 
embedding O t -> End(^4). (In the classical case O = M2(Z), corresponding to 
17 = 0, such an abelian surface is simply the square of an elliptic curve and we 
recover the familiar picture of modular curves parametrizing elliptic ones, but 
for nonempty S the surfaces A are simple except for those associated to CM 
points on X(l); we shall say more about CM points later.) The periods of these 
surfaces satisfy a linear second-order differential equation which is a Schwarzian 
equation for H/r(l), usually called a "Picard-Fuchs equation" in this context. 
[This generalizes the expression for the periods of elliptic curves (a.k.a. "complete 
elliptic integrals") as 2-F1 values, for which see e.g. [GR, 8.113 1.].] The group 
r*(l)/r(l) acts on X(l) with quotient curve X*(l). For each p e E there is 
then an involution w p g r*(l)/_T(l) associated to the class in _T*(l)/r(l) of 
elements of O of norm p, and these involutions commute with each other. (We 
chose the notation w p to suggest an analogy with the Atkin-Lehner involutions 
u>i, which as we shall see have a more direct counterpart in our setting when 

I is.) 

In terms of abelian surfaces these involutions w p of X(l) may be explained 
as follows. Let I p C O consist of the elements whose norm is divisible by p. 
Then I p is a two-sided prime ideal of O, with 0/I p = F p 2 and I p — pO. Given 
an action of O on a ppas A, the kernel of I p is a subgroup of A of size p 2 
isotropic under the Weil pairing, so the quotient surface A 1 := A/kerI p is itself 
principally polarized. Moreover, since I p is a two-sided ideal, A' inherits an action 
of O. Thus if A corresponds to some point P g X(l) then A' corresponds to a 
point P' e X(l) determined algebraically by P; that is, we have an algebraic 
map Wp '. P 1 ► P ! from X(l) to itself. Applying this construction to A 1 yields 
A/keTl p = A/kerpO = A/kcrp = A; thus w p (P') = P and w p is indeed 
an involution. The quotient curve X*(l) then parametrizes surfaces A up to 
the identification of A with A/ker I where / = r\ pe s'I P = Yl p es' f° r some 

Since X(l), X*(l) have the structure of algebraic curves over Q, they can 
be regarded as curves over R. Now a real structure on any Riemann surface is 
equivalent to an anti-holomorphic involution of the surface. For surfaces H/T 
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uniformized by the upper half-plane, we can give such an involution by choosing 
a group (r : 2) C PGL2(R) containing _T with index 2 such that (r : 2) <f_ 
PSL 2 (R). An element (^)R* of PGL 2 (R) - PSL 2 (R) (i.e. with ad - be < 0) 
acts on Ji anti-holomorphically z i— > (az+b)/(cz+d). Such a fractional conjugate- 
linear transformation has fixed points on Ti if and only if a + d = 0, in which 
case it is an involution and its fixed points constitute a hyperbolic line. Thus 
H/r, considered as a curve over R using r : 2, has real points if and only if 
(r : 2) — r contains an involution of H. The real structures on X(l), X*(l) are 
defined by 



That is, compared with (4,5) we drop the condition that the norm be positive. If 
S 7^ then X(l) has no real points, because if _T(1) : 2 contained an involution 
±a then the characteristic equation of a would be a 2 — 1 = and A would contain 
the zero divisors a ± 1. This is a special case of the result of [S3]. But X*(l) 
may have real points. For instance, we shall see that if £ = {2, 3} then _T*(1) is 
isomorphic with the triangle group 02,4,6- For general p, q, r with 3 1/p + l/q + 
l/r < 1 we can (and, if p,q,r are distinct, can only) choose G p , g , r : 2 so that 
the real locus of Tt/Gp^^ consists of three hyperbolic lines joining the three 
elliptic points in pairs, forming a hyperbolic triangle, with G p . q . r : 2 generated 
by hyperbolic reflections in the triangle's sides; it is this triangle to which the 
term "triangle group" alludes. 

2.3 The Shimura modular curves X(N) and X*(N) (with 

TV coprime to £); the curves Xq(N) and X£(N) and their 
involution wn 

Now let I be a prime not ramified in A. Then A<E> Q; and O <g) Z; are isomorphic 
with M 2 (Qi) and M 2 (Zi) respectively. Thus (O ® Q f )*/{±1} = PSL 2 (Z Z ), with 
the subscript 1 indicating the norm-1 subgroup as in (4). We can thus define 
congruence subgroups r(l), A(0i ^o(0 of -T(l) just as in the classical case in 
which S = and r(l) — PSL 2 (Z). For instance, r(l) is the normal subgroup 



of -T(l), with r(l)/r(l) = PSL 2 (F;); once we choose an identification of the 
quotient group r(l)/r(l) with PSL 2 (F;) we may define r (l) as the preimage in 
r(l) of the upper triangular subgroup of PSL 2 (F;). Likewise we have subgroups 
r(l r ), -To(r) etc., and even r(N), r (N) for a positive integer N not divisible 
by any of the primes of S. 

The quotients of H by these subgroups of r(l) are then modular curves 
covering X(l), which we denote by X(l), X (l), etc. They parametrize ppas's A 

3 If 1/p+l/q+l/r equals or exceeds 1, an analogous situation occurs with H replaced 
by the complex plane or Riemann sphere. 



(r(l) : 2) := 0*/{±l}, 
(r*(l) : 2) := {[a] G A*/Q* : aO = Oa}. 



(21) 
(22) 



{±a e 0* + /{±l} : a = 1 mod 1} 



(23) 
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with an O-action and extra structure: in the case of X(N), a choice of basis 
for the A-torsion points A[N}: in the case of X (N), a subgroup G C A[N] 
isomorphic with (Z/N) 2 and isotropic under the Weil pairing. In the latter case 
the surface A' = A/G is itself principally polarized and inherits an action of O 
from A, and the image of A[N] in A' is again a subgroup G' = (Z/N) 2 isotropic 
under the Weil pairing. Thus if we start from some point P on Xq(N) and 
associate to it a pair (A, G) we obtain a new pair (A', G') of the same kind and a 
new point P' £ Xq(N) determined algebraically by P. Thus we have an algebraic 
map wn ■ P i— > P' from Xq(N) to itself. As in the classical case — in which it 
is easy to see that the construction of A', G' from A, G amounts to (the square 
of) the familiar picture of cyclic subgroups and dual isogenies — this wn is an 
involution of Xq (A) that comes from a trace-zero element of A of norm A whose 
image in A*/Q* is an involution normalizing Jo (TV). 

By abuse of terminology we shall say that a pair of points P, P' on X(l) 
are "cyclically A-isogenous" 4 if they correspond to ppas's A, A 1 with A 1 — A/G 
as above, and call the quotient map A — > A/G = A' a "cyclic A-isogeny". If 
we regard P,P' as I n (l)-orbits in TL then they are cyclically A-isogenous iff a 
point in the first orbit is taken to a point in the second by some a £ O of 
norm A such that a =/= ma' for any a' £ O and m > 1; since in that case a also 
satisfies this condition and acts on Tt as the inverse of a, this relation on P, P' is 
symmetric. Then Xq(N) parametrizes pairs of A-isogenous points on X(l), and 
wn exchanges the points in such a pair. The involutions w p on X(l) lift to the 
curves X(N), X (N), etc., and commute with wn on X (N). 

The larger group r* (1) likewise has congruence groups such as r* ( A) , _T * ( A) , 
etc., which give rise to modular curves covering X*(l) called X*(N), X£(N), etc. 
The involution wn on X (N) descends to an involution on Xq (N) which we shall 
also call wn- We extend our abuse of terminology by saying that two points on 
X*(l) are "cyclically A-isogenous" if they lie under two A-isogenous points 
of X(l), and speak of "A-isogenies" between the equivalence classes of ppas's 
parametrized by X*(l). One new feature of the congruence subgroups of _T*(1) 
is that, while r*(N) is still normal in r*(l), the quotient group may be larger 
than PSL 2 (Z/A), due to the presence of the w p . For instance if I ^ S is prime 
then r*(l)/r*(l) is PSL 2 (F;) only if all the primes in E are squares modulo I; 
otherwise the quotient group is PGL 2 (F;). In either case the index of (N) in 
r*(l), and thus also the degree of the cover Xq(N)/X*(1), is I + 1. 

Since these curves are all defined over Q, they can again be regarded as curves 
over R by a suitable choice of (r : 2). For instance, if T = r(N), A (A), T (A) 
we obtain (_T : 2) by adjoining a £ O of norm —1 such that a = (J _°) mod A 
under our identification of O/NO with M 2 (Z/A). Note however that most of 
the automorphisms PSL 2 (Z/A) of X(N) do not commute with ( Q _ 1 ) and thus 
do not act on X(N) regarded as a real curve. Similar remarks apply to r*(N) 
etc. 

4 This qualifier "cyclically" is needed to exclude cases such as the multiplication-by-m 
map, which as in the case of elliptic curves would count as an "m 2 -isogeny" but not 
a cyclic one. 
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Now fix a prime Z ^ E and consider the sequence of modular curves X r — 
X (l r ) or X r = Xq {V) (r = 0, 1, 2, . . .). The r-th curve parametrizes T-isogenies, 
which is to say sequences of Z-isogenies 

A -» A l -» A 2 -» > A„ (24) 

such that the composite isogeny Aj_i — » A,- + i is a cj/cZic Z 2 -isogeny for each 
j with < j < n. Thus for each m = 0,1, ... ,n there are n + 1 — m maps 
7Tj : X„ — ► X m obtained by extracting for some j = 0, 1, . . . , n — m the cyclic 
Z m -isogeny Aj — > Aj +m from (24). Each of these maps has degree l n ~ m , unless 
m = when the degree is (Z + l)Z n_1 . In particular we have a tower of maps 

A„ — > A„_i — > A„_ 2 — > ' ' ' — ► ^2 — > Ai, (^t)J 

each map being of degree Z. We observed in [E6, Prop. 1] that explicit formulas 
for X\,X 2 , together with their involutions wi,wp and the map ttq : X2 — > A"i, 
suffice to exhibit the entire tower (25) explicitly: For n > 2 the product map 

7T = 7T X 7T1 X 7T 2 X • • • X 7T rl _ 2 : X n — > _1 (26) 

is a 1:1 map from A"„ to the set of {P\,P 2 , . . . , P n -i) € A'J - such that 

7roK(P,-)) ^iM^+i)) (27) 

for each j = l,2,...,n — 2. Here we note that this information on X\, X 2 is in 
turn determined by explicit formulas for Xq,X\, together with the involution 
wi and the map tt : X\ — > X . Indeed ~K\ : X\ — > A" is then 7r o and the 
product map 7r x 7ti : X 2 — > identifies X 2 with a curve in X 2 contained in 
the locus of 

{(Qi,Q 2 )eXf : 7r 1 (Q 1 )= 7 ro(Q 2 )}, (28) 

which decomposes as the union of that curve with the graph of wi. 5 This de- 
termines X 2 and the projections wj : X 2 — > Ad (j = 0,1); the involution 
is 

(Qi,Q 2 ) (wiQ 2 ,t«iOi). (29) 

Thus the equations we shall exhibit for certain choices of A and I suffice to 
determine explicit formulas for towers of Shimura modular curves Xo(l r ), Xq(I t ), 
towers whose reduction at any prime V £ S U {1} is known to be asymptotically 
optimal over the field of I' 2 elements [I3,TVZ]. 

2.4 Complex-multiplication (CM) and supersingular points on 
Shimura curves 

Let F be a quadratic imaginary field, and let Op be its ring of integers. Assume 
that none of the primes of S split in F. Then F embeds in A (in many ways), 

5 This is where we use the hypothesis that I is prime. The description of X n in (26,27) 
holds even for composite I, but the description of X2 in terms of Xi does not, because 
then (28) has other components. 
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and Of embeds in O. For any embedding i : F ^> A, the image of F* in A*/Q* 
then has a unique fixed point on TC; the orbit of this point under -T(l), or under 
any other congruence subgroup r C A*/Q*, is then a CM point on the Shimura 
curve Ti/r. In particular, on X(l) such a point parametrizes a ppas with extra 
endomorphisms by i(F) n O. For instance if i(F) flO = c(Of) then this ppas is 
a product of elliptic curves each with complex multiplication by Of (but not in 
the product polarization). In general l^ 1 (l(F) n O) is called the CM ring of the 
CM point on X(\). Embeddings conjugate by -T(l) yield the same point on X(l), 
and for each order O C F there are finitely many embeddings up to conjugacy, 
and thus finitely many CM points on X{1) with CM ring O; in fact their number 
is just the class number of O. In [S2] Shimura already showed that all points 
with the same CM ring are Galois conjugate over Q, from which it follows that 
a CM point is rational if and only if its CM ring has unique factorization. 

Thus far the description is completely analogous to the theory of complex 
multiplication for j-invariants of elliptic curves. But when S ^= a new phe- 
nomenon arises: CM points on the quotient curve X*{1) may be rational even 
when their preimages on X(l) are not. For instance, a point with CM ring Of 
is rational on X*(l) if and only if the class group of F is generated by the 
classes of ideals I C Of such that I 2 is the principal ideal (p) for some rational 
prime p G S. This has the amusing consequence that when S = {2, 3} the num- 
ber of rational CM points on X*(l) is more than twice the number of rational 
CM points on the classical modular curve X(l). [Curiously, already in the clas- 
sical setting X(l) does not hold the record: it has 13 rational CM points, whilst 
^o(6) = Xo(6)/(w2,W3) has 14. The reason again is fields F with nontrivial 
class group generated by square roots of the ideals (2) or (3), though with a few 
small exceptions both 2 and 3 must ramify in F. In the X*(l) setting the primes 
of £ are allowed to be inert as well, which makes the list considerably longer.] In 
fact for each of the first four cases S = {2, 3}, {2, 5}, {2, 7}, {3, 5} we find more 
rational CM points than on any classical modular curve. 

A major aim of this paper is computation of the coordinates of these points. 
We must first list all possible O. The class number of O, and thus of F, must be 
a power of 2 no greater than 2 #l; . In each of our cases, = 2, so F has class 
number at most 4 and we may refer to the list of imaginary quadratic number 
fields with class group (Z/2) r (r = 0, 1, 2), proved complete by Arno [A]. 6 Given 
F we easily find all possible O, and imbed each into O by finding a e O such 
that (a — a) 2 — disc(O). This gives us the CM point on TL. But we want its 
coordinates on the Shimura curve H/r*(l) as rational numbers. Actually only 
one coordinate is needed because X*(l) has genus for each of our four E. We 
recover the coordinate as a real number using our Schwarzian uniformization 
of X*(l) by H. (Of course a coordinate on P 1 is only defined up to PGL 2 (Q), 



It might be possible to avoid that difficult proof for our application, since we are 
only concerned with fields whose class group is accounted for by ramified primes in 
a given set E, and it may be possible to provably list them all using the arithmetic 
of CM points on either classical or Shimura modular curves, as in Heegner's proof 
that Q(V— 163 ) is the last quadratic imaginary field of class number 1. 



Shimura Curve Computations 15 



but in each case we choose a coordinate once and for all by specifying it on 
the CM points.) We then recognize that number as a rational number from its 
continued fraction expansion, and verify that the putative rational coordinate not 
only agrees with our computations to as many digits as we want but also satisfies 
various arithmetic conditions such as those described later in this section. 

Of course this is not fully satisfactory; we do not know how to prove that, for 
instance, t = 13 2 67 2 109 2 139 2 157 2 163/2 10 5 6 11 6 17 6 (see Tables 1,2 below) is the 
CM point of discriminant —163 on the curve X*(l) associated with the algebra 
ramified at {2, 3}. But we can prove that above half of our numbers are correct, 
again using the modular curves X* (I) and their involutions wi for small I. This 
is because CM points behave well under isogenics: any point isogenous to a CM 
point is itself CM, and moreover a point on X(l) or X*(l) is CM if and only if 
it admits a cyclic (i-isogeny to itself for some d > 1 . Once we have formulas for 
Xq (I) and wi we may compute all points cyclically /-isogenous either with an 
already known CM points or with themselves. The discriminant of a new rational 
CM point can then be determined either by arithmetic tests or by identifying it 
with a real CM point to low precision. 

The classical theory of super singular points also largely carries over to the 
Shimura setting. We may use the fact that the ppas parametrized by a CM 
point has extra endomorphisms to define CM points of Shimura curves alge- 
braically, and thus in any characteristic ^ S. In positive characteristic p ^ S, 
any CM point is defined over some finite field, and conversely every F p -point of 
a Shimura curve is CM. All but finitely many of these parametrize ppas's whose 
endomorphism ring has Z-rank 8; the exceptional points, all defined over F p 2, 
yield rank 16, and are called supersingular, all other F p -points being ordinary. 
One may choose coordinates on X(l) (or X*(\)) such that a CM point in charac- 
teristic zero reduces mod p to a ordinary point if p splits in the CM field, and to 
a supersingular point otherwise. Conversely each ordinary point mod p lifts to a 
unique CM point (cf. [D] for the classical case). This means that if two CM points 
with different CM fields have the same reduction mod p, their common reduction 
is supersingular, and then as in [GZ] there is an upper bound on p proportional 
to the product of the two CM discriminants. So for instance if X*(l) = P 1 then 
the difference between the coordinates of two rational CM points is a product 
of small primes. This remains the case, for similar reasons, even for distinct 
CM points with the same CM field, and may be checked from the tables of ra- 
tional CM points in this paper. The preimages of the supersingular points on 
modular covers such as X (l) yield enough F p 2 -rational points on these curves 
to attain the Drinfcld-Vladu^ bound [13]; these curves are thus "asymptotically 
optimal" over F p 2. Asymptotically optimal curves over F p 2/ (/ > 1) likewise 
come from Shimura curves associated to quaternion algebras over totally real 
number fields with a prime of residue field F p / . 

In the case of residue field F p (so in particular for quaternion algebras over Q) 
Ihara [12] found a remarkable connection between the hyperbolic uniformization 
of a Shimura curve X = 7i/r and the supersingular points of its reduction mod p. 
We give his result in the case that X has genus 0, because we will only apply it 



16 Noam D. Elkics 



to such curves and the result can be stated in an equivalent and elementary form 
(though the proof is still far from elementary). Since we are working over F p , we 
may identify any curve of genus with P 1 , and choose a coordinate (degree-1 
function) t on P 1 such that t = oo is an elliptic point. Let tj be the coordinates 
of the remaining elliptic points. 

First, the hyperbolic area of the curve controls the number of points, which 
is approximately \{p + l)Area(A') — "approximately" because \{p + l)Area(Af) 
is not the number of points but their total mass. The mass of a non-elliptic 
supersingular point is 1 , but an elliptic point with stabilizer G has mass 1 / #G. 
If the elliptic point mod p is the reduction of only one elliptic point on H/T 
(which, for curves coming from quaternion algebras over Q, is always the case 
once p > 3), then its stabilizer is Z/eZ and its mass is 1/e where e is the index of 
that elliptic point. [The mass formula also holds for X of arbitrary genus, and for 
general residue fields provided p is replaced by the size of the field.] Let d be the 
number of non-elliptic supersingular points, and choose a Schwarzian equation 
(16) with at most regular singularities at t = oo, U and no other singularities. 
Then the supersingular points are determined uniquely by the condition that 
their t-coordinates are the roots of a polynomial P(t) of degree d such that 
for some n € Q the algebraic function fl^t — ti) Ti ■ P(t) is a solution of the 
Schwarzian differential equation (16)! For instance [12, 4.3], if r is a triangle 
group we may choose fj = 0,1, and then P{t) is a finite hypergeometric series 
mod p. 

Given to £ Q we may then test whether to is ordinary or supersingular mod p 
for each small p. If to is a CM point with CM field then its reduction is ordinary 
if p splits in F, supersingular otherwise. When we have obtained t as a good 
rational approximation to a rational CM point, but could not prove it correct, 
we checked for many p whether t is ordinary or supersingular mod p; when each 
prime behaves as expected from its behavior in F, we say that to has "passed 
the supersingular test" modulo those primes p. 

3 The case E = {2, 3} 

3.1 The quaternion algebra and the curves Af(l), 

For this section we let A be the quaternion algebra ramified at {2,3}. This 
algebra is generated over Q by elements b, c satisfying 

b 2 = 2, c 2 = -3, be = ~cb. (30) 

The conjugation of A fixes 1 and takes 6, c, be to —6, — c, —6c; thus for any element 
a = ai + a 2 b + a^c + a^bc e A the conjugate and norm of a are given by 

a — a.\ — a 2 b — a^c — a^bc, N(a) = ot\ — 2a\ + 3a 2 — d>a\. (31) 

Since A is indefinite, all its maximal orders are conjugate; let O be the maximal 
order generated by b and (l+c)/2. Then r*(l) contains r(l) with index 2* s = 4, 
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and consists of the classes mod Q* of elements of O of norm 1, 2, 3, or 6. In 
row II of Table 3 of [T] (p. 208) we find that T*(l) is isomorphic with the triangle 
group 

G 2 ,4,6 := (S2, Si, sq\s% = a\ = s% = s 2 s 4 s 6 = 1). (32) 
Indeed we find that _T*(1) contains elements 

a 2 = [bc+2c], Si = [(2 + 6)(l + c)], s 6 = [3 + c] (33) 

[NB (2 + 6)(1 + c), 3 + c e 20] of orders 2, 4, 6 with s 2 s 4 s 6 = 1. The subgroup 
of r*(l) generated by these elements is thus isomorphic with C?2,4,6- But a 
hyperbolic triangle group cannot be isomorphic with a proper subgroup (since 
the areas of the quotients of TL by the group and its subgroup are equal), so 
r*(l) is generated by 52,^4, s 6 . Note that these generators have norms 6,2,3 
mod (Q*) 2 , and thus represent the three nontrivial cosets of r*(l) in £)*/{±l}. 

Since -T*(l) is a triangle group, X*(\) is a curve of genus 0. Moreover X*(l) 
has Q-rational points (e.g. the three elliptic points, each of which must be ra- 
tional because it is the only one of its index), so X*(l) = P 1 over Q. Let t 
be a rational coordinate on that curve (i.e. a rational function of degree 1). In 
general a rational coordinate on P 1 is determined only up to the PGL2 action 
on P 1 , but can be specified uniquely by prescribing its values at three points. 
In our case X*(l) has three distinguished points, namely the elliptic points of 
orders 2, 4, 6; we fix t by requiring that it assume the values 0, 1, 00 respectively 
at those three points. 

None of s 2 ,s 4 ,s 6 is contained in r(l). Hence the (Z/2) 2 cover X(l)/X*(l) 
is ramified at all three elliptic points. Thus s 2 lies under two points of X(l) 
with trivial stabilizer, while S4 lies under two points of index 2 and s$ under two 
points of index 3. By either the Riemann-Hurwitz formula or from (10) we see 
that X(l) has genus 0. This and the orders 2, 2, 3, 3 of the elliptic points do not 
completely specify r(l) up to conjugacy in PSL 2 (R): to do that we also need the 
cross-ratio of the four elliptic points. Fortunately this cross-ratio is determined 
by the existence of the cover X(l) — > X*(l), or equivalently of an involution 
s 4 on X(l) that fixes the two order-2 points and switches the order-3 points. 
This forces the pairs of order-2 and order-3 points to have a cross-ratio of —1, 
or to "divide each other harmonically" as the Greek geometers would say. The 
function field of X(l) is generated by the square roots of cot and c\ (t—1) for some 
cq,c\ G Q*/Q* 2 , but we do not yet know which multipliers cq, c\ are appropriate. 
If both Co,Ci were 1 then X(\) would be a rational curve with coordinate u 
with t = ((u 2 + l)/2u) 2 = 1 + ((u 2 — l)/2u) 2 , the familiar parametrization 
of Pythagorean triples. The elliptic points of order 2 and 3 would then be at 
u = ±1 and u = 0, 00. However it will turn out that the correct choices are 
c = — 1, ci = 3, and thus that X(l) is the conic with equation 

X 2 + Y 2 + ZZ 2 = (34) 

and no rational points even over R. [That X(l) is the conic (34) is announced in 
[Ku, p. 279] and attributed to Ihara; that there are no real points on the Shimura 
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curve X(l) associated to any indefinite quaternion algebra over Q other than 
M 2 (Q) was already shown by Shimura [S3]. The equation (34) for X(l) does not 
uniquely determine Co , c\ , but the local methods of [Ku] could probably supply 
that information as well.] 



3.2 Shimura modular curves X*(l) and X(V) for I = 5, 7, 13 

Let I be a prime other than the primes 2, 3 of S. We determine the genus of 
the curve Xq(1) using the formula (10). Being a cover of X*(l) of degree I + 1, 
the curve Xq(1) has normalized hyperbolic area (/ + 1)/12. It has 1 + (—6//) 
elliptic points of order 2, 1 + (—1/0 elliptic points of order 4, and 1 + (—3//) 
elliptic points of order 6. This is a consequence of our computation of s%, S4, sq, 
which lift to elements of A that generate subfields isomorphic with Q(\/— 6), 
Q(V— 1 ), and Q(\/— 3 ). Actually the orders 2,4,6 of the elliptic points suffice. 
Consider the images of S2, S4, sq in the Galois group (C PGL2(F;)) of the cover 
Xq (l)/X*(l), and the cycle structures of their actions on the I + 1 points of 
P 1 (F;). These images 02, 0-4,0-6 are group elements of order 2,4,6. For 4 and 6, 
the order determines the conjugacy class, which joins as many of the points 
of P 1 (F;) as possible in cycles of length 4 or 6 respectively and leaves any 
remaining points fixed; the number of fixed points is two or none according to 
the residue of I mod 4 or 6. For a 2 there are two conjugacy classes in PGL 2 (F;), 
one with two fixed points and the other with none, but the choice is determined 
by the condition that the genus g(X£ (I)) be an integer, or equivalently by the 
requirement that the signs of 0-2,0-4, <tq considered as permutations of P 1 (F/) be 
consistent with S2S4S6 = 1. We readily check that this means that the image of 
S2 has two fixed points if and only if (—6/0 = +1, as claimed. From (10) we 
conclude that 



ff(*o(0) = ^ 



914 



10I-? 



(35) 



We tabulate this for I < 50: 



I 



5 7 11 13 17 19 23 29 31 37 41 43 47 



g(X£(l)) 0010112111223 
It so happens that in the first seven cases g(X£ (I)) coincides with the genus 
of the classical modular curve X o (0, but of course this cannot go on forever 
because the latter genus is 1/12 + 0(1) while the former is only 1/24 + 0(1), 
and indeed ^(^(Z)) is smaller for all / > 23. Still, as with Xo(Z), we find that 
Xq(1) has genus for I = 5, 7, 13, but not for I = 11 or any I > 13. For the three 
genus-0 cases we shall use the ramification behavior of the cover Xq(1)/X*(1) to 
find an explicit rational function of degree I + 1 on P 1 that realizes that cover 
and determine the involution wi. 

Now for any I > 3 the solution of o- 2 CT40- 6 = 1 in elements 0-2,0-4,06 °f 
orders 2,4,6 in PGL2(F;) is unique up to conjugation in that group. Thus we 
know from the general theory of [Mat] that the cover Xq (I) / X* (1) is determined 
by its Galois group and ramification data. Unfortunately the proof of this fact 
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does not readily yield an efficient computation of the cover; for instance the 
Ricmann existence theorem for Riemann surfaces is an essential ingredient. We 
use a method for finding the rational function t : Xq (I) — ► X*(l) explicitly that 
amounts to solving for its coefficients, using the cycle structures of <72, 04, to 
obtain algebraic conditions. In effect these conditions are the shape of the divisors 
(*)o, (£)oo- But a rational function satisfying these conditions is not in 

general known to have the right Galois group: all we know is that the monodromy 
elements around 0, l,oo have the right cycle structures in the symmetric group 
Sj+i. Thus we obtain several candidate functions, only one of which has Galois 
group PGL 2 (F ; ) (or PSL 2 (F ( ) if I = 1 mod 24). Fortunately for I = 5, 7 we can 
exclude the impostors by inspection, and for I = 13 the computation has already 
been done for us. 

1=5 . Here the cycle structures of s 2 , S4, s 6 are 2211, 411, 6. Curiously if the 
identity in the symmetric group Sq is written as the product of three permu- 
tations 0-2,04,(76 w hh these cycle structures then they can never generate all 
of 56- This can be seen by considering their images <r' 2 , a' 4 , <r' 6 under an outer au- 
tomorphism of Sq: these have cycle structures 2211, 411, 321, and thus have too 
many cycles to generate a transitive subgroup (if two permutations of n letters 
generate a transitive subgroup of S n then they and their product together have 
at most n + 2 cycles). It turns out that the subgroup generated by <j 2 , cr' 4 , a' 6 can 
be either A4 x S2 or the point stabilizer S5. In the former case 02, 04, og generate 
a transitive but imprimitive subgroup of Sq: the six letters are partitioned into 
three pairs, and the group consists of all permutations that respect this partition 
and permute the pairs cyclically. In the latter case 02, #4, <j§ generate PGL 2 (F 5 ); 
this is the case we are interested in. In each of the two cases the triple (02, 04, a§) 
is determined uniquely up to conjugation in the subgroup of S% generated by 
the cr's, each of which is in a rational conjugacy class in the sense of [Mat]. Thus 
each case corresponds to a unique degree-6 cover P 1 — > P 1 defined over Q. We 
shall determine both covers. 

Let t be a rational function on P 1 ramified only above t = 0, 1, 00 with cycle 
structures 2211, 411, 6. Choose a rational coordinate x on P 1 such that x — 00 is 
the sextuple pole of t and x = is the quadruple zero of t — 1; this determines x 
up to scaling. Then t is a polynomial of degree 6 in x with two double roots such 
that t = 1 mod x 4 . The double roots are necessarily the roots of the quadratic 
polynomial x~ 3 dt/dx. Thus t is a polynomial of the form c$x e + c$x 5 + C4.X 4 + 1 
divisible by Qc^x 2 A-hc^x+Ac^. We readily compute that there are two possibilities 
for C4,C5,c 6 up to scaling (04,05, c§) — ► (A 4 C4, A 5 c 5 , \ 6 cq). One possibility gives 
t = 2x e — 3x 4 + 1 = (x 2 — l) 2 (2x 2 + 1); being symmetric under x «-> —x this 
must be the imprimitive solution. Thus the remaining possibility must give the 
PGL 2 (F 5 ) cover Xq(5)/X*(1). The following choice of scaling of x = x 5 seems 
simplest: 

t = 540x 6 + 324x 5 + 135s 4 + 1 

(36) 

= 1 + 27x 4 (20a; 2 + 12a; + 5) = (15x 2 - 6x + l)(6x 2 + 3x + l) 2 . 

The elliptic points of order 2 and 4 on Xq (5) are the simple zeros of t and t — 1 
respectively, i.e. the roots of 15x 2 — 6x + 1 and 20x 2 + 12.x + 5. The involution 
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W5 switches each elliptic point with the other elliptic point of the same order; 
this suffices to determine w$. The fact that two pairs of points on P 1 switched 
by an involution of P 1 determine the involution is well-known, but we have not 
found in the literature an explicit formula for doing this. Since we shall need this 
result on several occasion we give it in an Appendix as Proposition A. Using that 
formula (89), we find that 

, > 42- 55x 
^ = 55T30CV (3?) 

1=7 . This time S2,S4,s 6 have cycle structures 22211, 44, 611. Again there 
are several ways to get the identity permutation on 8 letters as a product of 
three permutations with these cycle structures, none of which generate the full 
symmetric group Sg . There are two ways to get the imprimitive group 2 4 : S4; 
the corresponding covers are obtained from the S4 cover t = 4£ 3 — 3£ 4 by taking 
£ = x 2 + £ where £ is either root of the quadratic 3£ 2 + 2£ + 1 = (1 — t)/ (£ — 1 ) 2 . 
The remaining solution corresponds to our PGL 2 (Fy) cover. 

To find that cover, let t be a rational function on P 1 ramified only above 
t = 0, 1, 00 with cycle structures 2211, 411, 6, and choose a rational coordinate x 
on P 1 such that x = 00 is the sextuple pole of t. This determines x up to an 
affine linear transformation. Then there is a cubic polynomial P and quadratic 
relatively prime polynomials Qi,Q2iQs in x such that t = P 2 Qi/Q 3 = 1 + 
Q\IQ?>, i- e - sucn that P 2 Q\ — Q\ is quadratic. Equivalently, the Taylor expansion 
of Q2/VQ1 about x = 00 should have vanishing x _1 and x~ 2 coefficients, and 
then R(x) is obtained by truncating that Taylor expansion after its constant 
term. We assume without loss of generality that Q\, Q2 are monk. By translating 
x (a.k.a. "completing the square" ) we may assume that Qi is of the form x 2 + a. 
If the same were true of Q2 then t would be a rational function of x 2 and we 
would have an imprimitive cover. Thus the constant coefficient of Q2 is nonzero, 
and by scaling x we may take Q2 = x 2 + x + [3. We then set the x -1 ,^ 2 
coefficients of of Q\j \fQ\ to zero, obtaining the equations 

3a 2 - 8af3 + 8(3 2 -Aa = 3a 2 - Aaf3 = 0. (38) 

Thus either a — or a — 4/3/3. The first option yields (3 = which fails because 
then Qi, Q2 have the common factor x. The second option yields (3 — 0, which 
again fails for the same reason, but also (3 — 2 which succeeds. Substituting 
— (2x + l)/3 for x to reduce the coefficients we then find: 

(4x 2 + Ax + 25)(2x 3 - 3x 2 + I2x - 2) 2 



108(7x 2 - 8x + 37) 

(39) 

j (2x 2 - x + 8) 4 
~ 108(7x 2 - 8x + 37) ' 

The elliptic points of order 2 and 6 on X$ (7) are respectively the simple zeros 
and poles of t, i.e. the roots of Ax 2 + Ax + 25 and 7x 2 — 38.x + 7. The involution 
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W7 is again by the fact that it switches each elliptic point with the other elliptic 
point of the same order: it is 

, , 116 — 9x . . 

wrix) = - — — — . (40) 
w 9 + 2Cte v ; 

1=13 . Here the cycle structures are 2 7 , 44411, 6611. The computation of the 
degree- 14 map is of course much more complicated than for the maps of degrees 
6,8 for I = 5,7. Fortunately this computation was already done in [MM, §4] (a 
paper concerned not with Shimura modular curves but with examples of rigid 
PSL 2 (F p ) covers of the line). There we find that there is a coordinate x — x 13 
on X* (13) for which 

27 (x 2 + 36) (x 3 + x 2 + 35a; + 27) 4 



4 (7x 2 + 2x + 247) (x 2 + 39) 6 

_ (x 7 - 50x 6 + 63x 5 - 5040a; 4 + 783a; 3 - 168426a; 2 - 6831a; - 1864404) 2 
~ 4(7x 2 + 2a; + 247) (a; 2 + 39) 6 ' 

The elliptic points of order 4 and 6 on Xq (13) are respectively the simple zeros 
and poles of t — 1, i.e. the roots of a; 2 + 36 and 7a; 2 + 2x + 247. Once more we 
use (89) to find the involution from the fact that it switches each elliptic point 
with the other elliptic point of the same order: 

/ \ 5x + 72 
w 13 (x) = — -. (42) 

From an equation for X*(l) and the rational map t on that curve we recover 
X (l) by adjoining square roots of cot and c\(t — 1). For each of our three cases 
I = 5, 7, 13 the resulting curve has genus 1, and its Jacobian is an elliptic curve of 
conductor 6£ — but only if we choose Co, ci that give the correct quadratic twist. 
For I = 5, I = 7, I = 13 it turns out that we must take a square root of 3t(l — t), 
—t, 3(£ — 1) respectively Fortunately these are consistent and we obtain c = —1 
and c\ — 3 as promised. The resulting curves Ao(5), Xo(7), Xq(13) have no ra- 
tional or even real points (because this is already true of the curve X(l) which 
they all cover); their Jacobians are the curves numbered 30F,42C, 78B in the 
Antwerp tables in [BK] compiled by Tingley et al., and and 30-A6, 42-A3, 78-A2 
in Cremona [C]. 



3.3 Supersingular points on X*(l) mod I 

We have noted that Ihara's description of supersingular points on Shimura curves 
is particularly simple in the case of a triangle group: the non-elliptic supersin- 
gular points are roots of a hypergeometric polynomial, and the elliptic points 
are CM in characteristic zero so the Deuring test determines whether each one 
is supersingular or not. 

In our case, The elliptic points t = 0, t = 1, t = 00 are supersingular mod I 
if and only iff I is inert in Q(\/— 6), Q(\/^T), Q(\/— 3) respectively, i.e. iff —6, 
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— 1, —3 is a quadratic nonresidue of I. Thus the status of all three elliptic points 
depends on I mod 24, as shown in the next table: 



t 








/ mod 24 






e 


1 


•5 


7 


11 


13 


17 


19 


23 





2 










• 


• 


• 


• 


1 


4 






• 


• 






• 


• 


oo 


6 




• 




• 




• 




• 



(bullets mark elliptic points with supersingular reduction). This could also be 
obtained from the total mass (I + l)/24 of supersingular points, together with 
the fact that the contribution to this mass of the non-elliptic points is integral: 
in each column the table shows the unique subset of 1/2, 1/4, 1/6 whose sum is 
congruent to (Z + l)/24 mod 1. The hypergeometric polynomial whose roots are 
the non-elliptic supersingular points has degree [Z / 24J , and depends on I mod 24 
as follows: 





5 . 

24 ' 




if I = 


1 or 5 mod 24; 




11 . 

24 ' 


2 > 


if I = 


7 or 11 mod 24; 


r V24' 


17. 

24 ' 


2 > *7! 


if 1 = 


13 or 17 mod 24; 


r \ 24 ' 


23. 

24 ' 


2 ' v h 


if 1 = 


19 or 23 mod 24. 



(43) 



For example, for I = 163 (= 19 mod 24) we find 
19 23 3 

F(— , — ; -; t) = 43t 6 + 89t 5 + 97t 4 + 52i 3 + 149t 2 + 132* + 1 

= {t + 76) (t + 78) (t + 92) (t + 127) (t 2 + 65t + 74) (44) 

in characteristic 163, so the supersingular points mod 163 are 0, 1, and the roots 
of (44) in F 163 2. 

3.4 CM points on X*(l) via X*(l) and w t 

We noted already that the elliptic points t = 0, l,oo on X*(l) are CM points, 
with discriminants —3, —4, —24. Using our formulas for X (l) and wi (I = 5, 7, 13) 
we can obtain fourteen further CM points: three points isogenous to one of the 
elliptic CM points, and eleven more points cyclically isogenous to themselves. 
This accounts for all but ten of the 27 rational CM points on X*(\). The discrim- 
inants of the three new points isogenous to t = 1 or t = oo are determined by 
the isogenies' degrees. The discriminants of the self-isogenous points can be sur- 
mised by testing them for supersingular reduction at small primes: in each case 
only one discriminant small enough to admit a self-isogeny of that degree has 
the correct quadratic character at the first few primes, which is then confirmed 
by extending the test to all primes up to 200. 

On Xq (5) the image of X5 = 00 under W5 is —11/60, which yields the CM 
point t = 152881/138240; likewise from w 5 (0) — 42/55 we recover the point 
421850521/1771561. These CM points are 5-isogenous with the elliptic points 
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t = oo, t = 1 respectively, and thus have discriminants —3 • 5 2 and — 4 • 5 2 . Simi- 
larly on A *(7) we have w 7 (oo) = -9/20 at which t = -1073152081/3024000000, 
a CM point 7-isogenous with t = oo and thus of discriminant —3 • 7 2 . 

For each of I = 5, 7, 13 the two fixed points of wi on Xq (I) are rational and 
yields two new CM points of discriminants — cl for some factors c of 24. For 
Xq (5) these fixed points are x$ = —3/5 and X5 = 7/30, at which t = 2312/125 
and £ = 5776/3375 respectively; these CM points have discriminants —40, —120 
by the supersingular test. For Xq(7) wc find X7 = 2 and X7 = —29/10, and thus 
t = -169/27, t = -701784/15625 of discriminants -84, -168 divisible by 7. 
For A"* (13) the fixed points x 13 = 9, x 13 = -4 yield t = 6877/15625 and t = 
27008742384/27680640625, with discriminants -52 = 4-13 and -312 = 24 • 13. 

Each of these new CM points admits an Z-isogeny to itself. By solving the 
equation t(xi) = t{wi(xi)) we find the remaining such points; those not accounted 
for by fixed points of wi admit two self-isogenies of degree I, and correspond to 
a quadratic pair of xi values over Q(t). As it happens all the t's thus obtained 
are rational with the exception of a quadratic pair coming from the quartic 
167xf 3 - 60x 3 13 + 12 1 38x 2 3 - 1980xi 3 + 221607 = 0. Those points are: from X* (5) , 
the known t = 1, t = -169/25, and the new t = -1377/1024, t = 3211/1024 
of discriminants -51, -19; from X$(7), the CM points t = 0, 152881/138240, 
3211/1024, 2312/125, 6877/15625 seen already, but also t = 13689/15625 of 
discriminant —132; and from Xq (13), seven of the CM points already known 
and also the two new values t = 21250987/16000000, 15545888/20796875 of 
discriminants —43, —88. 

3.5 Numerical computation of CM points on X*(l) 

If we could obtain equations for the modular cover of X*(l) by the elliptic 
curve Af* (11), X*(17) or A"* (19) we could similarly find a few more rational 
CM points on X*(l). But we do not know how to find these covers, let alone the 
cover X*(l) for I large enough to get at the rational CM point of discriminant 
— 163; moreover, some applications may require irrational CM points of even 
higher discriminants. We thus want a uniform way of computing the CM points 
of any given discriminant as an algebraic irrationality. We come close to this by 
finding these points and their algebraic conjugates as real (or, in the irrational 
case, complex) numbers to high precision, and then using continued fractions 
to recognize their elementary symmetric functions as rational numbers. We say 
that this "comes close" to solving the problem because, unlike the case of the 
classical modular functions such as j, we do not know a priori how much precision 
is required, since the CM values are generally not integers, nor is an effective 
bound known on their height. However, even when we cannot prove that our 
results are correct using an isogeny of low degree, we are quite confident that 
the rational numbers we exist are correct because they not only match their 
numerical approximations to many digits but also pass all the supersingularity 
tests we tried as well as the condition that differences between pairs of CM values 
are products of small primes as in [GZ] . 
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To do this we must be able to compute numerically the rational function t : 
H I r* (l)-^P 1 . Equivalently, we need to associate to each t £ P 1 a representative 
of its corresponding r*(l)-orbit in H. We noted already that this is done, up to 
a fractional linear transformation over C, by the quotient of two hypergeometric 
functions in t. To fix the transformation we need images of three points, and 
we naturally choose the elliptic points t = 0,1, oo. These go to fixed points 
of S2,S4,s 6 £ r*(l), and to find those fixed points we need an explicit action 
of r*(l) on n. 

To obtain such an action we must imbed that group into Aut(W) = PSL 2 (R). 
Equivalently, we must choose an identification of A <g> R with the algebra M 2 (R) 
of 2 x 2 real matrices. Having done this, to obtain the action of some g £ 
r*(l) C A*/Q* on H we will choose a representative of g in A*, identify this 
representative with an invertible matrix { a cd ) of positive determinant, and let g 
act on z £ Tt by z i— > (az + b)/ (cz + d) . Identifying A <g> R with M 2 (R) is in turn 
tantamount to solving (30) in M 2 (R). 

We choose the following solution: 

>=-(?-*)• <"(-%?)■ 

The elliptic points are then the _T*(1) orbits of the fixed points in the upper 
half-plane of s 2 , S4, s 6 , that is, of 

P 2 := (1 + V2)i, P A :=^-^fi(-l + V2i), P & :=i. (46) 

v3 

Thus for \t\ < 1 the point on H/r*(l) which maps to t is the T*(l) orbit of z 
near P 2 such that 

(z-P 2 )/(z-P 2 )=F 1 (t)/F 2 (t) (47) 

for some solutions Fi,F 2 of the hypergeometric equation (18). Since the frac- 
tional linear transformation z (z — P 2 ) / (z — P 2 ) takes the hyperbolic lines 
P 2 Pa and P 2 P% to straight lines through the origin, F 2 must be a power series 
in t, and F\ is such a power series multiplied by \ft\ that is, 



( 2 -p 2 ,/(,-p 2 ) = C< v^(H,1!,|, ( )/ f (^A,^ 



f) ■ (48) 



for some nonzero constant C. We evaluate C by taking t = 1 in (48). Then 
z = P4, which determines the left-hand side, while the identity [GR, 9.122] 

F(a,6; q l)= y< C - -;j (49) 
1 (c — ajl [c — 0) 

gives us the coefficient of C in the right-hand side in terms of gamma functions. 
We find C = (.314837 . . .)i/(2.472571 . . .) = (.128545 . . Likewise we obtain 
convergent power series for computing z in neighborhoods of t = 1 and t = 00. 

Now let D be the discriminant of an order Od in a quadratic imaginary field 
Q(\/3j such that Od has a maximal embedding in O (i.e. an embedding such 
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that Od = (Ofl®Q)nO) and the embedding is unique up to conjugation in 
r*(l). Then there is a unique, and therefore rational, CM point on X*(l) of 
discriminant D. Being rational, the point is real, and thus can be found on one 
of the three hyperbolic line segments P2P4, P 2 Pe, P<iP&- It is thus the fixed point 
of a positive integer combination, with coprime coefficients, of two of the elliptic 
elements s 2 = be + 2c, s 4 = (2 + 6)(1 + c)/2, s & = (3 + c)/2 with fixed points 
P 2 ,P4,Pq. In each case a short search finds the appropriate linear combination 
and thus the fixed point z. Using (48) or the analogous formulas near t = 1, 
t = 00 we then solve for t as a real number with sufficient accuracy (60 decimals 
was more than enough) to recover it as a rational number from its continued- 
fraction expansion. 

3.6 Tables of rational CM points on X*(l) 

There arc 27 rational CM points on X*(\). We write the discriminant D of each 
of them as —DqDi where D$\2A and D\ is coprime to 6. In Table 1 we give, 
for each |D| = DqDi, the integers A,B with B > such that (A : B) is the 
i-coordinate of a CM point of discriminant D. In the last column of this table we 
indicate whether the point was obtained algebraically (via an isogeny of degree 5, 
7, or 13) and thus proved correct, or only computed numerically. The CM points 
are listed in order of increasing height m&x(\A\, B). 

In Table 2 we give, for each except the first three cases, the factorizations of 
\A\, B, \C\ where C = A — B, and also the associated 'ABC ratio" [El] defined 
by r = logiV(ABC)/logmax(|A|,.B, |C|). As expected, the A,B,C values are 
"almost" perfect squares, sixth powers, and fourth powers respectively: a prime 
at which at which the valuation of A, B, C is not divisible by 2, 6, 4 resp. is either 
2, 3, or the unique prime in D\. When D\ > 1 its unique prime factor is listed 
at the end of the \A\, B, or |C| factorization in which it appears; otherwise the 
prime factors are listed in increasing order. 

In the factorization of the difference between the last two t = A/B values in 
this table, the primes not accounted for by common factors in the last two rows 
of the table are 79, 127, 271, 907, 2287, 2971, 3547, each occurring once. 

4 The case 27 = {2, 5} 

4.1 The quaternion algebra and the curves X(l), X*(l) 

For this section we let A be the quaternion algebra ramified at {2, 5}. This time 
A is generated over Q by elements b, e satisfying 

b 2 + 2 = e 2 - 5 = be + eb = 0, (50) 

and the conjugate and norm of an element a = ct\ + a 2 b + a 3 e + a 4 be e A are 

a — a.\ — a 2 b — a 3 e — a^be, ad = act = a\ + 2a\ — 5a 2 . — 10a 2 . (51) 

The elements b and (1 + e)/2 generate a maximal order, which we use for O. 
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Table 1 



\D\ 


-Do 


Di 


A 


B 


proved? 


3 


3 


1 


1 





Y 


4 


4 


1 


1 


1 


Y 


24 


24 


1 





1 


Y 


84 


12 


7 


-169 


27 


Y 


40 


8 


5 


2312 


25 


Y 


51 


3 


17 


-1377 


1024 


Y 


19 


1 


19 


3211 


1024 


Y 


120 


24 


5 


5776 


3375 


Y 


52 


4 


13 


6877 


15625 


Y 


132 


12 


11 


13689 


15625 


Y 


75 


3 


5 2 


152881 


138240 


Y 


168 


24 


7 


-701784 


15625 


Y 


43 


1 


43 


21250987 


16000000 


Y 


228 


12 


19 


66863329 


11390625 


N 


88 


8 


11 


15545888 


20796875 


Y 


123 


3 


41 


-296900721 


16000000 


N 


100 


4 


5 2 


421850521 


1771561 


Y 


147 


3 




-1073152081 


3024000000 


Y 


312 


24 


13 


27008742384 


27680640625 


Y 


67 


1 


67 


77903700667 


1024000000 


N 


148 


4 


37 


69630712957 


377149515625 


N 


372 


12 


31 


-455413074649 


747377296875 


N 


408 


24 


17 


-32408609436736 


55962140625 


N 


267 


3 


89 


-5766681714488721 


1814078464000000 


N 


232 


8 


29 


66432278483452232 


56413239012828125 


N 


708 


12 


59 


71475755554842930369 


224337327397603890625 


N 


163 


1 


163 


699690239451360705067 


684178814003344000000 


N 



By (9), the curve X*(l) has hyperbolic area 1/6. Since the algebra A is 
not among the nineteen algebras listed in [T] that produce arithmetic triangle 
groups, X*(l) must have at least four elliptic points. On the other hand, by (10) 
a curve of area as small as 1/6 cannot have more than four elliptic points, and 
if it has exactly four then their orders must be 2, 2, 2, 3. Indeed we find in r*(l) 
the elements of finite order 

s 2 = [b] , s' 2 = [2e + 56 - be] , s' 2 ' = [56 - be] , s 3 = [2b - e - 1] (52) 

[NB 2e + 56 - be, 56 - be, 26 - e - 1 e 20] of orders 2, 2, 2, 3 with s 2 s' 2 s%s 3 = 1. 
As in the case of the 6*2,4,6 we conclude that here r*(l) has the presentation 

( s 2i s 2j s 2 i s 3 1 s 2 = s 2 = s 2 = s 3 = S 2 S 2 S 2 S 3 = !)• (53) 

Of the four generators only s 3 is in T(l); thus the (Z/2) 2 cover X{1)/X*{1) 
is ramified at the elliptic points of order 2. Therefore X(l) is a rational curve 
with four elliptic points of order 3, and 7^1) is generated by four 3-cycles whose 
product is the identity, for example by S3 and its conjugates by s 2 , s' 2 , s 2 . (The 
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Table 2 



\D\ 


D 


Di 


\A\ 


B 


\C\ 


r 


84 


12 


7 


13 2 


3 3 




1.19410 


40 


8 


5 


2 3 17 2 


5 3 


3 7 


0.80487 


51 


3 


17 


3 4 17 


2 io 


7 4 


0.84419 


19 


1 


19 


13 2 19 


2 io 


3 7 


0.90424 


120 


24 


5 


2 4 19 2 


3 3 5 3 


7 4 


0.95729 


52 


4 


13 


23 2 13 


5 6 


2 2 3 7 


1.00276 


132 


12 


11 


3 4 13 2 


5 6 


2 4 11 2 


0.87817 


75 


3 


5 2 


17 2 23 2 


2 10 3 3 5 


ll 4 


0.98579 


168 


24 


7 


2 3 3 5 19 2 


5 6 


U 4 7 2 


0.79278 


88 


8 


11 


2 5 17 2 41 2 


5 6 n 3 


3 7 7 4 


0.86307 


43 


1 


43 


19 2 37 2 43 


2 10 5 6 


3 7 7 4 


0.92839 


228 


12 


19 


13 2 17 2 37 2 


3 6 5 6 


2 6 7 4 19 2 


0.96018 


123 


3 


41 


3 4 13 2 23 2 41 


2 10 5 6 


7 4 19 4 


0.90513 


100 


4 


5 2 


19 2 23 2 47 2 


ll 6 


2 4 3 7 7 4 5 


0.88998 


147 


3 


7 2 


17 2 41 2 47 2 


2 10 3 3 5 6 7 


11 4 23 4 


0.96132 


312 


24 


13 


2 4 3 5 17 2 43 2 13 


5 6 11 6 


7 4 23 4 


0.83432 


67 


1 


67 


13 2 43 2 61 2 67 


2 16 5 6 


g7 7 4 n 4 


0.89267 


148 


4 


37 


13 2 47 2 71 2 37 


5 6 17 6 


2 2 3 7 7 4 11 4 


0.94008 


372 


12 


31 


13 2 23 2 37 2 61 2 


3 3 5 6 11 6 


2 2 7 4 19 4 31 2 


0.99029 


408 


24 


17 


2 6 13 2 19 2 43 2 67 2 


3 6 5 6 17 3 


7 4 11 4 31 4 


0.88352 


267 


3 


89 


3 6 13 2 17 2 19 2 71 2 89 


2 16 5 6 11 6 


7 4 31 4 43 4 


0.87610 


232 


8 


29 


2 3 13 2 17 2 41 2 89 2 113 2 


5 6 23 6 29 3 


3 7 7 4 11 4 19 4 


0.91700 


708 


12 


59 


3 4 13 2 19 2 23 2 37 2 41 2 109 2 


5 6 17 6 29 6 


2 8 7 4 11 4 47 4 59 2 


0.91518 


163 


1 


163 


13 2 67 2 109 2 139 2 157 2 163 


2 io 5 6 n 6 17 6 


3 n 7 4 19 4 23 4 


0.90013 



genus and number of elliptic points of X(l), X* (I), but not the generators of 
r(l),r*(l), are already tabulated in [V, Ch.IV:2].) 



4.2 Shimura modular curves X£(l), in particular X£(3) 

The elliptic elements s 3 , s 2 , s' 2 , s' 2 ' have discriminants —3, —8, —20, —40. Thus the 
curve Xq(1) has genus 



<?(*o(0) 



1 

12 



1-4 



- 3 



-10 



(54) 



Again we tabulate this for I < 50: 



I 



ffW(0) 



3 7 11 13 17 19 23 29 31 37 41 43 47 



11 



1 



3 3 



3 



Since g(X£ (I)) > (I — 13)/12, the cases I = 3, 7 of genus occurring in this 
table are the only ones. We next find an explicit rational functions of degree 4 
on P 1 that realizes the cover Xq(3)/Xq(1), and determine the involution W3. 

The curve Xq (3) is a degree-4 cover of X*(l) with Galois group PGL 2 (F 3 ) 
and cycle structures 31, 211, 211, 22 over the elliptic points P 3 , P 2 , P^P'-l- Thus 
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there are coordinates r, x on X*(l), Xq(3) such that t(x) — (x 2 — c) 2 / (x — l) 3 
for some c. To determine the parameter c, we use the fact that W3 fixes the 
simple pole x = 00 and takes each simple preimage of the 211 points P 2 , P 2 to 
the other simple preimage of the same point. That is, 

(x 2 -c)- 1 (x-lf^-=x 2 -4x + 3c (55) 

must have distinct roots Xi (i = 1, 2) that yield quadratic polynomials 

{x-l?{T{x)-T{ Xi )) 



(X 



(56) 



with the same x coefficient. We find that this happens only for c = —5/3, i.e. 
that t = (3x 2 + 5) 2 /9(x — l) 3 . For future use it will prove convenient to use 

t 63 ( fa ~ 6 ) 3 (57) 

9r + 8 (x + l) 2 (9a; 2 -10a; + 17)' 1 ' 

with wz{x) — 7^ — x. [Smaller coefficients can be obtained by letting x = 1 + 2/ x', 
t = 2f'/9, when t' = (2x' 2 + 3x' + 3) 2 /x' and w 3 (x') = ~9x'/(Ax' + 9). But our 
choice of x will simplify the computation of the Schwarzian equation, while the 
choice of t will turn out to be the correct one 3-adically.] The elliptic points are 
then P3 : t — 0, P% '■ t = 27, and P2, P'^ : t = 00, 2. In fact the information so 
far does not exclude the possibility that the pole of t might be at P' 2 instead 
of P2; that in fact t(P 2 ) = 00, i^) = 2 and not the other way around can be 
seen from the order of the elliptic points on the real locus of X*(l), or (once we 
compute the Schwarzian equation) checked using the supcrsingular test. 



4.3 CM points on X*(l) via AT* (3) and w 3 

From w 3 we obtain five further CM points. Three of these are 3-isogenous to 
known elliptic points: W3 takes the triple zero x = 1 of t to x = 1/9, which gives 
us t = —192/25, the point 3-isogenous to P3 with discriminant —27; likewise W3 
takes the double root x — 5 and double pole x = —1 of t — 2 to x = —35/9, 19/9 
and thus to t — —2662/169 and t — 125/147, the points 3-isogenous to t — 2 and 
t = 00 and thus (once these points are identified with P' 2 and P 2 ) of discriminants 
— 180 and —72. One new CM point comes from the other fixed point x = 5/9 
of W3, which yields t = —27/49 of discriminant —120. Finally the remaining 
solutions of t(x) = t(w3(x)) are the roots of 9x 2 — 10a; + 65; the resulting CM 
point t = 64/7, with two 3-isogenies to itself, turns out to have discriminant —35. 

4.4 The Schwarzian equation on X*(l) 

We can take the Schwarzian equation on X*(l) to be of the form 



t(t - 2)(i - 27)/" + (At 2 + Bt + C)f + (Dt + E)=0. (58) 
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The coefficients A,B,C,D are then forced by the indices of the elliptic points. 
Near t — 0, the solutions of (58) must be generated by functions with leading 
terms 1 and t 1 ' 3 ; near t = 2 (t = 27), by functions with leading terms 1 and 
(t — 2) 1 / 2 (rcsp. (t — 27) 1//2 ); and at infinity, by functions with leading terms 
t~ e and t-"- 1 / 2 for some e. The conditions at the three finite singular points 
t = 0,2, 27 determine the value of the /' coefficient at those points, and thus 
yield A,B,C, which turn out to be 5/3,-203/6,36. Then e, e + 1/2 must be 
roots of an "indicial equation" e 2 - 2e/3 + D = 0, so e = 1/12 and D = 7/144. 
Thus (58) becomes 

((1 _ m _ 2T)r + '°' 2 -7 + 2 'V + (£ + E) . 0. (59) 

To determine the "accessory parameter" E, we again use the cover Xq(3)/X*(1) 
and the involution u> 3 . A Schwarzian equation for Xq(3) is obtained by substi- 
tuting t = {Ox - 6) 3 /(x + l) 2 (9x 2 - lOx + 17) in (59). The resulting equation 
will not yet display the W3 symmetry, because it will have a spurious singular 
point at the double pole x = — 1 of t(x). To remove this singularity we consider 
not f(t(x)) but 

g(x):=(x + l)-V 6 f(t(x)). (60) 

The factor (x + l) -1 ' 6 is also singular at x = 00, but that is already an elliptic 
point of Xq (3) and a fixed point of W3. Let x = u + 5/9, so W3 is simply u <-> — u. 
Then we find that the differential equation satisfied by g is 

4(81u 2 + 20)(81u 2 + 128)V' + 108w(81w 2 + 128)(405m 2 + 424) 3 ' t 

(61) 

+ (3 n u 4 - 163296m 2 + 170496 + 72(18£ + 7)(9u - 4)(81u 2 + 128))g = 0. 

Clearly this has the desired symmetry if and only if 18.E + 7 = 0. Thus the 
Schwarzian equation is 

™n ,« 10t 2 - 203t + 216 ,. , 7t 7, „ 
t(t - 2){t - 27)/" + /' + (_-_) = 0. (62) 



4.5 Numerical computation of CM points on Af*(l) 

We can now expand a basis of solutions of (62) in power series about each 
singular point t = 0,2, 27, 00 (using inverse powers of t — 4p for the expansion 
about 00 to assure convergence for real t ^ [0, 27]). As with the S = {2, 3} case 
we need to identify A ® R with M 2 (R) , and use the solution 

of (50), analogous to (30). We want to proceed as we did for S = {2, 3}, but there 
is still one obstacle to computing, for given to € R the point on the hyperbolic 
quadrilateral formed by the fixed points of s 2 , s' 2 , s'2, s 3 at which t — to- In the 
S = {2, 3} case, the solutions of the Schwarzian equation were combinations of 
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hypergeometric functions, whose value at 1 is known. This let us determine two 
solutions whose ratio gives the desired map to H. But here _T*(1) is not a triangle 
group, so our basic solutions of (62 are more complicated power series and we 
do not know a priori their values at the neighboring singular points. In general 
this obstacle can be overcome by noting that for each nonsingular to E R its 
image in H can be computed from the power-series expansions about either of its 
neighbors and using the condition that the two computations agree for several 
choices of t to determine the maps to H. In our case we instead removed the 
obstacle using the non-elliptic CM points computed in the previous section. For 
example, we used the fact that to = 125/147 is the CM point of discriminant 72, 
and thus maps to the unique fixed point in H of (96 + 4e — be)/2, to determine 
the correct ratio of power series about t — and t = 2. Two or three such 
points suffice to determine the four ratios needed to compute our map R — > H 
to arbitrary accuracy; since we actually had five non-elliptic CM points, we used 
the extra points for consistency checks, and then used the resulting formulas to 
numerically compute the t-coordinates of the remaining CM points. 

There are 21 rational CM points on X*(l). We write the discriminant D 
of each of them as —D Di where A)|40 and D\ is coprime to 10. Table 3 is 
organized in the same way as Table 1: we give, for each \D\ = DoD 1: the inte- 
gers A, B with B > such that {A : B) is the ^coordinate of a CM point of 
discriminant D. The last column identifies with a "Y" the nine points obtained 
algebraically from the computation of Xq (3) and . Some but not all of the re- 
maining twelve points would move from "N" to "Y" if we also had the equations 
for the degree-8 map Xq(7) — > X*(l) and the involution w 7 on Xq(7). 

It will be seen that the factor 3 3 in our normalization (57) of t was needed 7 
to make t a good coordinate 3-adically: 3 splits in the CM field iff t is not a 
multiple of 3. 

In Table 4 we give the factorizations of |Aj, S, \A— 2B\, \A—27B\; as expected, 
\A\ is always "almost" a perfect cube, and B, \A - 2B\, \A - 27B\ "almost" a 
perfect square, any exceptional primes other than 2 or 5 being the unique prime 
in Di, which if it occurs is listed at the end of its respective factorization. 

5 Further examples and problems 

Our treatment here is briefer because most of the ideas and methods of the pre- 
vious sections apply here with little change. Thus we only describe new features 
that did not arise for the algebras ramified at {2,3} and {2,5}, and exhibit the 
final results of our computations of modular curves and CM points. 

5.1 The case S = {2,7} 

We generate A by elements b, g with 

b 2 + 2 = g 2 - 7 = bg + gb = 0, (64) 

7 On the other hand the factor 2 3 in (57) was a matter of convenience, to make the 
four elliptic points integral. 
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Table 3 



\D\ 


-Do 




A 


B 


proved? 


3 


1 


1 





1 


Y 


8 


8 


1 


1 





Y 


20 


20 


1 


2 


1 


Y 


40 


40 


1 


27 


1 


Y 


52 


4 


13 


-54 


25 


N 


120 


40 


3 


-27 


49 


Y 


35 


5 


7 


64 


7 


Y 


27 


1 


3 3 


-192 


25 


Y 


72 


8 


3 2 


125 


147 


Y 


43 


1 


43 


1728 


1225 


N 


180 


20 


3 2 


-2662 


169 


Y 


88 


8 


11 


3375 


98 


N 


115 


5 


23 


13824 


3887 


N 


280 


40 


7 


35937 


7406 


N 


67 


1 


67 


-216000 


8281 


N 


148 


4 


37 


71874 


207025 


N 


340 


20 


17 


657018 


41209 


N 


520 


40 


13 


658503 


11257064 


N 


232 


8 


29 


176558481 


2592100 


N 


760 


40 


19 


13772224773 


237375649 


N 


163 


1 


163 


-2299968000 


6692712481 


N 



and a maximal order O by Z[b, g] together with (l + 6+ g)/2 (and 6(l + <?)/2). By 
(9), the curve X*(l) has hyperbolic area 1/4. Since r*(l) is not a triangle group 
(again by [T]), we again conclude by (10) that X*(l) has exactly four elliptic 
points, this time of orders 2, 2, 2, 4. We find in r*(l) the elements of finite order 

s 2 = [b] , 4 = [76 - 2g - bg] , s' 2 ' = [7b + 2g - bg] , s 4 = [1 + 2b + g] (65) 

[NB 7b ± 2g - bg e 20} of orders 2, 2, 2, 4 with s 2 s' 2 s' 2 's 4 = 1, and conclude that 
s 2 , s' 2 , s 2 , s 4 generate _T*(1) with relations determined by s\ = s' 2 = s 2 2 = s\ = 
s 2 s' 2 s 2 S4 = 1. None of these is in r*(l): the representatives 6, 1 + 2b + g of s 2 , s 4 
have norm 2, while s' 2 , s 2 have representatives (7b ± 2g — bg)/2 of norm 14. The 
discriminants of s 4 , s 2l s' 2 , s 2 are —4, —8, —56, —56; note that —56 is not among 
the "idoneal" discriminants (discriminants of imaginary quadratic fields with 
class group (Z/2) r ), and thus that the elliptic fixed points P^P^' of s' 2 ,s 2 are 
quadratic conjugates on X*(\). 

Again we use the involution W3 on the modular curve (3) to simultaneously 
determine the relative position of the elliptic points P 4 , P 2 , P 2 ,P 2 on X*(l) and 
the modular cover Xq (3) — > X*(\), and then to obtain a Schwarzian equation 
on X*(l). Clearly P 4 is completely ramified in ^(3). Since —8 and —56 are 
quadratic residues of 3, each of -P2, -P^ ^2 has ramification type 211. Thus Xq (3) 
is a rational curve with six elliptic points all of index 2, and we may choose 
coordinates t, x on X*(l), Xq (3) such that t(P 4 ) = 00, t(P 2 ) = 0, and x = 00, 
x = at the quadruple pole and double zero respectively of t. 
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Table 4 



\D\ 


Do 


D 1 


\A\ 


B 


|A- 2B| 


\A - 27Bj 


3 


1 


1 





1 


2 


3 3 


8 


8 


1 


1 





1 


1 


20 


20 


1 


2 


1 





5 2 


40 


40 


1 


3 3 


1 


5 2 





52 


4 


13 


2-3 3 


5 2 


2 3 13 


3 6 


120 


40 


3 


3 3 


7 2 


5 3 


2-3 3 5 2 


35 


5 


7 


2 6 


7 


2-5 2 


5 3 


27 


1 


3 3 


2 6 3 


5 2 


2-11 2 


17 2 3 


72 


8 


3 2 


5 3 


7 2 3 


13 2 


2 2 31 2 


43 


1 


43 


2 6 3 3 


5 2 7 2 


_ _ „9 

2-19 2 


3 6 43 


180 


20 


3 2 


2-11 3 


13 2 


2 3 5 3 3 


5 2 17 2 


88 


8 


11 


3 3 5 3 


2-7 2 


17 2 11 


3 6 


115 


5 


23 


2 9 3 3 


13 2 23 


2-5 2 ll 2 


3 6 5 3 


280 


40 


7 


3 3 11 3 


2-23 2 7 


5 3 13 2 


3 s 5 2 


67 


1 


67 


2 6 3 3 5 3 


7 2 13 2 


2-ll 2 31 2 


3 8 67 


148 


4 


37 


2-3 3 ll 3 


5 2 7 2 13 2 


2 5 17 2 37 


3 8 29 2 


340 


20 


17 


2-3 3 23 3 


7 2 29 2 


2 3 5 2 13 2 7 


3 6 5 4 


520 


40 


13 


3 3 29 3 


2 3 7 2 47 2 13 


5 4 11 2 17 2 


3 8 5 2 43 


232 


8 


29 


3 3 11 3 17 3 


2 2 5 2 7 2 23 2 


13 2 19 2 53 2 


3 6 71 2 29 


760 


40 


19 


3 3 17 3 47 3 


7 2 31 2 71 2 


5 2 11 2 13 2 37 2 19 


2-3 8 5 3 67 2 


163 


1 


163 


2 9 3 3 5 3 11 3 


7 2 1 3 2 29 2 31 2 


2-19 2 59 2 79 2 


3 6 17 2 73 2 163 



We next determine the action of W3 on the elliptic points of Xq (3) . Necessarily 
the simple preimages of Pi parametrize two 3-isogenies from P2 to itself. On 
the other hand the simple preimages of P' 2 parametrize two 3-isogenies from 
that point to P![ and vice versa, because the squares of the primes above 3 in 
Q(\/— 14) are not principal. Therefore W3 exchanges the simple preimages of P2 
but takes each of the two simple points above P' 2 to one above P!{ and vice versa. 

So again we have a one-parameter family of degree-4 functions on P 1 , and 
a single condition in the existence of the involution W3; but this time it turns 
out that there are (up to scaling the coordinates t, x) two ways to satisfy this 
condition: 

t = i(x 4 + Ax 3 + 6x 2 ), w 3 (x) = ^^, P£,F% : t 2 - 3t + 3 = (66) 

and 

1 5 — 2x 

t = — (x 4 + 2x 3 + 9x 2 ), w 3 (x) = - , P' 2 , P 2 " : 16t 2 + 13t + 8 = 0. (67) 

27 2 + x 

How to choose the correct one? We could consider the next modular curve Xq (5) 
and its involution to obtain a new condition that would be satisfied by only one of 
(66,67). Fortunately we can circumvent this laborious calculation by noting that 
the Fuchsian group associated with (66) is commensurable with a triangle group, 
since its three elliptic points of index 2 are the roots of (1 — t) 3 = 1 and are thus 
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permuted by a 3-cycle that fixes the fourth elliptic point t — oo. The quotient 
by that 3-cycle is a curve parametrized by (1 — t) 3 with elliptic points of order 
2, 3, 12 at 1,0, oo. But by [T] there is no triangle group commensurable with an 
arithmetic subgroup of A*/Q*; indeed we find there that 6*2,3,12 is associated 
with the quaternion algebra over Q(\/3) ramified at the prime above 2 and at 
one of the infinite places of that number field. 8 Therefore (67) is the correct 
choice. Alternatively, we could have noticed that since X(l) is a (Z/2) 2 cover 
of X*(l) ramified at all four elliptic points, it has genus 1, and then used the 
condition that this curve's Jacobian have conductor 14 to exclude (66). The 
function field of X*(l) is obtained by adjoining square roots of cot and ci(16t 2 + 
13t + 8) for some Co,c\; for the Jacobian to have the correct conductor we must 
have cqCi = 1 mod squares. The double cover of X^(3) obtained by adjoining 
-\/ci(16i 2 + 13t + 8) also has genus 1, and so must have Jacobian of conductor 
at most 42; this happens only when c\ = — 1 mod squares, the Jacobian being 
the elliptic curve 42- A3 (42C). The curve X(l) then has the equation 

y 2 = -16.s 4 + 13s 2 -8 (t = -s 2 ), (68) 

and its Jacobian is the elliptic curve 14- A2 (14D). Kurihara had already obtained 
in [Ku] an equation birational with (68). Let ^o(3 r ) be the group intermediate 
between r (3 r ) and -T *(3 r ) consisting of the elements of norm 1 or 7 mod Q* 2 . 
Then the corresponding curves Xq(3 t ) (r > 0) of genus 3 r_1 + 1 are obtained 
from X^(3 r ) by extracting a square root of t(16t 2 + 13t + 8), and constitute an 
unramificd tower of curves over the genus-2 curve 

#0(3) : y 2 = 3(4a; 6 + 12x 5 + 75x 4 + 50a; 3 + 255x 2 - 288a; + 648) (69) 

whose reductions are asymptotically optimal over Fp (I 7^ 2, 3, 7) with each step 
in the tower being a cyclic cubic extension. (Of course when we consider only 
reductions to curves over Fp the factor of 3 in (69) may be suppressed.) 

Using W3 we may again find the coordinates of several non-elliptic CM points: 
t = 4/3 and t = 75/16 of discriminants —36 and —72, i.e. the points 3-isogcnous 
to P4 and P2, other than P4, P 2 themselves; t = 4/9 and t = 200/9 of discrim- 
inants —84 and —168, coming from the fixed points x = 1 and x = — 5 of w 3 ; 
and the points t = — 1, t = — 5 of discriminants —11 and —35, coming from the 
remaining solutions of t(x) = t(w 3 (x)) and each with two 3-isogenies to itself. 

Even once the relative position of the elliptic points is known, the computa- 
tion of the cover Xq (5) / X* (1) is not a trivial matter; I thank Peter Miiller for 
performing this computation using J.-C. Faugere's Grobner basis package GB. It 
turns out that there are eight PGL^Fs) covers consistent with the ramification 
of which only one is defined over Q: 

(256x 3 + 224a; 2 + 232x + 217) 2 . , 24 - 7x 
' = 50000(a; 2 + 1) ' 7 + 24^ (?0) 



See [T], table 3, row IV. In terms of that algebra A', the triangle group G2,3,i2 is 
r*(l); the index-3 normal subgroup whose quotient curve is parametrized by the t 
of (66) is the normalized in _T*(1) of {[a] £ 0*/{±l} : a = 1 mod I2}; and the inter- 
section of this group with -T *(3) yields as quotient curve the P 1 with coordinate x. 
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Table 5 



\D\ 


Do 


Di 


A 


B 


16.4 2 + 13,45 + 8B 2 


4 


4 


1 


1 







2 4 


8 


8 


1 





1 




2 3 


11 


1 


11 


-1 


1 




11 


35 


7 


5 


-5 


1 




7 3 


36 


4 


3 2 


4 = 2 2 


3 




2 2 11 2 


84 


28 


3 


4 = 2 2 


9 = 


3 2 


2 2 7 3 


72 


8 


3 2 


75 = 5 2 3 


16 = 


2 4 


2 7 29 2 


91 


7 


13 


-13 


81 = 


3 4 


7 3 11 2 


43 


1 


43 


-25 = -5 2 


81 = 


3 4 


29 2 43 


168 


56 


3 


200 = 2 3 5 2 


9 = 


3 2 


2 4 7 3 11 2 


88 


8 


11 


- 200 = -2 3 5 2 


81 = 


3 4 


2 5 37 2 11 


100 


4 


5 2 


- 196 = -2 2 7 2 


405 = 


3 4 5 


2 2 11 2 43 2 


67 


1 


67 


-1225 = -5 2 7 2 


81 = 


3 4 


11 2 53 2 67 


280 


56 


5 


- 845 = -13 2 5 


1296 = 


2 4 3 4 


2 8 7 3 11 2 


148 


4 


37 


1225 = 5 2 7 2 


5184 = 


2 6 3 4 


2 4 11 2 67 2 37 


532 


28 


19 


96100 = 2 2 5 2 31 2 


29241 = 


3 4 19 2 


2 2 7 3 11 2 29 2 37 2 


232 


8 


29 


135200 = 2 5 5 2 13 2 


194481 = 


g4 7 4 


2 3 11 2 53 2 109 2 29 


427 


7 


61 


-3368725 = -5 2 47 2 61 


6561 = 


3 8 


7 3 11 2 29 2 43 2 53 2 


163 


1 


163 


-2235025 = -5 2 13 2 23 2 


1185921 = 


3 4 11 4 


37 2 107 2 149 2 163 



This yields the CM points of discriminants —11, —35, —36, —84 already known 
from W3, and new points of discriminants —91, —100, —280. 

This accounts for eleven of the nineteen rational CM points on X*(l); the 
remaining ones were computed numerically as we did for the £ — {2,5} curve. 
We used the Schwarzian equation 

t(16t 2 + 13* + 8)/" + (24t 2 + 13* + 4)/' + + / = , (71) 

for which the "accessory parameter" 3/16 was again determined by pulling back 
to Xq(3) and imposing the condition of symmetry under W3. We tabulate the 
coordinates t = A/B and factorizations for all nineteen points in Table 5. 

We see that t is also a good coordinate 3-adically: a point of X*(l) is su- 
persingular at 3 iff the denominator of its i-coordinate is a multiple of 3. (It is 
supersingular at 5 iff 5|i.) 

5.2 The case S = {3, 5} 

Here the area of X*(l) is 1/3. This again is small enough to show that there are 
only four elliptic points, but leaves two possibilities for their indices: 2,2,2,6 or 
2,2,3,3. It turns out that the first of these is correct. This fact is contained in the 
table of [V, Ch.IV:2]; it can also be checked as we did in the cases E — {2,p} 
(p = 3,5,7) by exhibiting appropriate elliptic elements of r*(l) — which we 
need to do anyway to compute the CM points. We chose to write write O = 
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Z[±l + c, e] with 

c 2 + 3 = e 2 - 5 = ce + ec = 0, (72) 
and found the elliptic elements 

s 2 = [4c - 3e] , s 2 = [5c - 3e - ce] , s 2 ' = [20c - 9e - 7ce] , s 6 = [3 + c] (73) 

[NB 20c - 9e - 7ce, 3 + c e 20] of orders 2, 2, 2, 6 with s 2 s 2 s 2 s e = 1. The corre- 
sponding elliptic points P 2 , P 2 ,P 2 , P 6 have CM discriminants —3, —12, —15, —60. 
For the first time we have a curve Xq (2), and here it turns out that the elliptic 
points P 2 1S not ramified in the cover Xq (2) / X* (1): it admits two 2-isogenies 
to itself, and one to P". Of the remaining elliptic points, P§ is totally ramified, 
and each of P 2 , P 2 has one simple and one double preimage. So we may choose 
coordinates x,t on Xq(2) and X*(l) such that t — x(x — 3) 2 /4, with t{P%) = 00, 
t(P 2 ) — 0, t(P 2 ) = 1. To determine i(P^) we u se the involution w 2 , which 
switches x = 00 (the triple pole) with x = (the simple zero), x = 4 (the simple 
preimage of Pj') with one of the preimages xi of P2 (the one parametrizing the 
isogeny from P 2 to P 2 ), and the other two preimages of P2 with each other. 
Then w 2 is x <-» Ax\/x, so the product of the roots of (i(xi) — t(x))/(x — xi) is 
4a;i. Thus 

a;(a; - 3) 2 - 4t(P 2 ') = (x - x^ix 2 + ax + 4xi) (74) 

for some a. Equating a; 2 coefficients yields a = xi — 6, and equating the coeffi- 
cients of x we find 9 = 10.t 1 — x\. Thus x\ = 1 or x\ = 9; but the first would 
give us t(P 2 ) = 1 = t(P 2 ) which is impossible. Thus x\ = 9 and t(P^) = 81, with 
W2(x) — 36/x. This lets us find six further rational CM points, of discriminants 
—7, —28, —40, —48, —120, —240; we can also solve for the accessory parameter 
— 1/2 in the Schwarzian equation 

t(t -m- si)/" + (h 2 82t + ^pj r + [U - / = 0, (75) 

and use it to compute the remaining twelve rational CM points numerically. We 
tabulate the coordinates t = A/B and factorizations for the twenty- two rational 
CM points on X*(l) in Table 6. 

An equivalent coordinate that is also good 2-adically is (t — l)/4, which is 
supersingular at 2 iff its denominator is even. 

The elliptic curve X(l) is obtained from X*(l) by extracting square roots 
of At and B(t - l)(t - 81) for some A, B e Q*/Q* 2 . Using the condition that 
the Jacobian of X(l), and any elliptic curve occurring in the Jacobian of X (2), 
have conductor at most 15 and 30 respectively, we find A = B = —3. Then X(l) 
has equation 

y 2 = -(3s 2 + l)(s 2 + 27) (76) 

(with t = —3s 2 ) and Jacobian isomorphic with elliptic curve 15C (15-A1); the 
curve intermediate between X *(2) and Xq{2) w hose function field is obtained 
from Q(X*(2)) by adjoining \/—3(t — l)(t — 81) has equation 



y 2 = -3(x 4 - 10.x 3 + 33x 2 - 360x + 1296) 



(77) 
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Table 6 
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D 


Di 


A 


B 


A — B 


815 - A 


3 


3 


1 


1 





1 


-1 


12 


3 


2 2 





1 


-1 


3 4 


60 


15 


2 2 


1 


1 





2 4 5 


15 


15 


1 


81 = 3 4 


1 


2 4 5 





7 


1 


7 


-27 = -3 3 


1 


-2 2 7 


2 2 3 3 


40 


5 


2 3 


27 = 3 3 


2 


5 2 


3 3 5 


43 


1 


43 


-27 = -3 3 


16 = 2 4 


-43 


3 3 7 2 


195 


15 


13 


81 = 3 4 


16 = 2 4 


5-13 


3 3 5 


48 


3 


2 4 


243 = 3 5 


1 


11 2 2 


-3 4 2 


120 


15 


2 3 


-243 = -3 5 


2 


-7 2 5 


3 4 5 


28 


1 


2 2 7 


-675 = -3 3 5 2 


1 


-2 2 13 2 


2 2 3 3 7 


115 


5 


23 


621 = 3 3 23 


16 = 2 4 


11 2 5 


3 3 5 2 


147 


3 


7 2 


-729 = -3 6 


112 = 2 4 7 


-29 2 


3 4 11 2 


123 


3 


41 


2025 = 3 4 5 2 


16 = 2 4 


7 2 41 


-3 6 


67 


1 


67 


-3267 = -3 3 11 2 


16 = 2 4 


-7 2 67 


3 3 13 2 


240 


15 


2 4 


9801 = 3 4 11 2 


1 


2 3 5 2 7 2 


-2 3 3 5 5 


267 


3 


89 


7225 = 5 2 17 2 


16 = 2 4 


3 4 89 


-7 2 11 2 


435 


15 


29 


21141 = 3 6 29 


16 = 2 4 


5 3 13 2 


-3 4 5-7 2 


795 


15 


53 


-6413 = -11 2 53 


432 = 2 4 3 3 


-5-37 2 


5-7 2 13 2 


235 


5 


47 


1269 = 3 3 47 


1024 = 2 10 


5-7 2 


3 3 5 2 11 2 


555 


15 


37 


23409 = 3 4 17 2 


1024 = 2 10 


5-ll 2 37 


3 5 5-7 2 


163 


1 


163 


-1728243 = -3 3 11 2 23 2 


1024 = 2 10 


-103 2 163 


3 3 7 2 37 2 



and Jacobian 30C (30-A3). Fundamental domains for r*(l) and -T(l), computed 
by Michon [Mi] and drawn by C. Leger, can be found in [V, pp. 123-127]; an 
equation for X(l) birational with (76) is reported in the table of [JL, p. 235]. 

5.3 The triangle group 62,3,7 as an arithmetic group 

It is well-known that the minimal quotient area of a discrete subgroup of Aut(W) 
= PSL^R) is 1/42, attained only by the triangle group C?2,3,7j and that the 
Riemann surfaces Ti/T with r a proper normal subgroup of finite index in 6*2,3.7 
are precisely the curves of genus g > 1 whose number of automorphisms attains 
Hurwitz's upper bound 84(g — 1). Shimura observed in [S2] that this group is 
arithmetic. 9 Indeed, let K be the totally real cubic field Q(cos27r/7) of minimal 
discriminant 49, and let A be a quaternion algebra over K ramified at two of the 
three real places and at no finite primes of K . Now for any totally real number 
field of degree n > 1 over Q, and any quaternion algebra over that field ramified 
at n— 1 of its real places, the group r(\) of norm-1 elements of a maximal order 
embeds as a discrete subgroup of PSL 2 (R) = Aut(W), with H/T of finite area 

9 Actually this fact is due to Fricke [F1,F2], over a century ago; but Fricke could not 
relate G2,3,7 to a quaternion algebra because the arithmetic of quaternion algebras 
had yet to be developed. 
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given by Shimizu's formula 



Area(#(l)) 



4 /2 Ck(2) 

4n-l.jj.2n 



pes 



1) 



Oti-2 



pes 



(78) 



(from which we obtained (8) by taking K = Q). Thus, in our case of K = 
Q(cos2tt/7), E = {oo,oo'}, the area of H/T(l) is 1/42, so T(l) must be iso- 
morphic with 62,3.7. From this Shimura deduced [S2, p. 83] that for any proper 
ideal / C Ok his curve X(I) = H/r(I) attains the Hurwitz bound. For in- 
stance, if I is the prime ideal p 7 above the totally ramified prime 7 of Q then 
X(p 7 ) is the Klein curve of genus 3 with automorphism group PSL 2 (F 7 ) of order 
168. The next-smallest example is the ideal p 8 above the inert prime 2, which 
yields a curve of genus 7 with automorphism group [PjSI^Fg) of order 504. 
This curve is also described by Shimura as a "known curve", and indeed it first 
appears in [F3] ; an equivalent curve was studied in detail only a few years before 
Shimura by Macbeath [Mac], who does not cite Fricke, and the identification 
of Macbeath's curve with Fricke's and with Shimura's Af(p 8 ) may first have 
been observed by Serre in a 24.vii.1990 letter to Abhyankar. At any rate, we 
obtain towers {X(p 7 )} r> o, {X(p^)} r> o of unramified abelian extensions which 
are asymptotically optimal over the quadratic extensions of residue fields 10 of K 
other than F49 and Fq^ respectively, which are involved in the class field towers 
of exponents 7, 2 of the Klein and Macbeath curves over those fields. 

These towers are the Galois closures of the covers of X(l) by Ao(p 7 ), Ao(p 8 ), 
which again may be obtained from the curves Ao(p 7 ), Ao(p 8 ) together with their 
involutions. It turns out that these curves both have genus (indeed the corre- 
sponding arithmetic subgroups 7o(p 7 ), 7o(p 8 ) of r(l) are the triangle groups 
^3,3,7, £1*2.7,7 in [T, class X]). The cover Xo(p 7 )/X(l) has the same ramification 
data as the degree-8 cover of classical modular curves Xo(7)/X(l), and is thus 
given by the same rational function 



t 



(xf - 8x? - 18a;? - 88x 7 + 1409) 2 
2 13 3 3 (9 -a; 7 ) 



(79) 



1 + 



{x 2 7 - 8a; 7 - 5) 3 {x 2 7 + 8x 7 + 43) 
2 13 3 3 (9 -x 7 ) 



(with the elliptic points of orders 2, 3,7 at t = 0,1, 00, i.e. t corresponds to 
1 — 12~ 3 j). The involution is different, though: it still switches the two simple 
-4 ± \J—H of t — 1, but it takes the simple pole x 7 — to itself 



zeros x 7 



instead of the septuple pole at x 7 — 00. Using (89) again we find 



U! 



P 7 



(xr) = 



10 That is, over the fields of size p 2 for primes p 
primes p. 



19x 7 + 711 
13x 7 - 19 ' 
- 7 or p : 



(80) 



±1 mod 7, and p 6 for other 
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For the degree-9 cover X (p 8 )/X(l) we find 

(1 - x s ){2xj + 4x 3 s + 18.^1 + Ux 8 + 25) 2 



t = 



27(4x1 + hx 8 + 23) 

(81) 

4(xg+x| + 5x 8 -l) 3 
27(4a;| + 5x 8 + 23) ' 

with the involution fixing the simple zero x 8 = 1 and switching the simple poles, 
i.e. 

. . 51 — 19x 8 , . 

^^=19 + 13^- (82) 

Note that all of these covers and involutions have rational coefficients even 
though a priori they are only known to be defined over K. This is possible 
because K is a normal extension of Q and the primes p 7 , p 8 used to define 
our curves and maps are Galois-invariant. To each of the three real places of K 
corresponds a quaternion algebra ramified only at the other two places, and thus 
a Shimura curve X(l) with three elliptic points P2, P3, P7 to which we may as- 
sign coordinates 0, l,oo. Then Gb1(K/Q) permutes these three curves; since we 
have chosen rational coordinates for the three distinguished points, any point 
on or cover of X(l) defined by a Galois-invariant construction must be fixed 
by this action of Galois and so be defined over Q. The same applies to each 
of the triangle groups G p . q . r associated with quaternion algebras over number 
fields F properly containing Q, which can be found in cases III through XIX 
of Takeuchi's list [T]. In each case, F is Galois over Q, and the finite ramified 
places of the quaternion algebra are Galois- invariant. Moreover, even when G Pl g, r 
is not -T(l), it is still related with r(l) by a Galois-invariant construction (such 
as intersection with -To(p) or adjoining w p or w p for a Galois-invariant prime p 
of F). At least one of the triangle groups in each commensurability class has dis- 
tinct indices p, q, r, whose corresponding elliptic points may be unambiguously 
identified with 0, 1, 00; this yields a model of the curve 7i/G Pj9>r , and thus of all 
its commensurable triangle curves, that is defined over Q. 

This discussion bears also on CM points on X(l). There are many CM points 
on X(l) rational over K, but only seven of those are Q-rational: a CM point 
defined over Q must come from a CM field K' which is Galois not only over K 
but over Q. Thus K' is the compositum of K with an imaginary quadratic field, 
which must have unique factorization. We check that of the nine such fields only 
five retain unique factorization when composed with K. One of these, Q(V~ 7), 
yields the cyclotomic field Q(e 27 ™/ 7 ), whose ring of integers is the CM ring for the 
elliptic point P7 : t = 00; two subrings still have unique factorization and yield 
CM points p 7 - and p 8 -isogenous to that elliptic point, which again are not only 
K- but even Q-rational thanks to the Galois invariance of p 7 , p 8 . The other four 
cases are the fields of discriminant —3, —4, —8, —11, which yield one rational CM 
point each. The first two are the elliptic points P3, P2 :t= 1, 0. To find the coor- 
dinates of the CM point of discriminant —8, and of the two points isogenous with 
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Pr, we may use the involutions (80,82) on Ao(p 7 ) and Ab(p 8 ). On X (p 7 ), the in- 
volution takes x 7 — oo to 19/13, yielding the point t = 3593763963/4015905088 
p 7 -isogenous with P 7 on X(l); on Ao(p 8 ) the involution takes x a = 00 to 
-19/13, yielding the point t = 47439942003/8031810176 p 8 -isogenous with P 7 . 
On the latter curve, the second fixed point of the involution (besides a; 8 = 1) 
is x s = -51/13, which yields the CM point t = 1092830632334/1694209959 of 
discriminant —8. The two points isogenous with P-j also arise from the second 
fixed point of w p ^ and a further solution of t(x s ) — t(w Ps (x 8 )). 

This still leaves the problem of locating the CM point of discriminant —11. 
We found it numerically using quotients of hypergeometric functions as we did 
for G 2 a,6- Let c = 2 cos 27r/7, so c is the unique positive root of c 3 + c 2 — 2c — 1. 
Consider the quaternion algebra over K generated by i, j with 

i 2 = j 2 = c, ij = -ji. (83) 

This is ramified at the two other real place of K , in which c maps to the negative 
reals 2cos47r/7 and 2cos67r/7, but not at the place with c = 2cos27r/7; since 
c is a unit, neither is this algebra ramified at any finite place with the possible 
exception of p 8 , which we exclude using the fact that the set of ramified places 
has even cardinality. Thus K(i,j) is indeed our algebra A. A maximal order O is 
obtained from Ox[i, j] by adjoining the integral element (l + ci + (c 2 + c+l)j)/2. 
Then O* contains the elements 

92 := ij/c, g 3 := ^(1 + (c 2 - 2)j + (3 - c 2 )i 3 ), 

(84) 

97 ■= \{c 2 + c - 1 + (2 - c 2 ^ + (c 2 + c - 2)ij) 

of norm 1, with g\ = g\ = g 7 7 = -1 and g 2 = g 7 g 3 - Thus the images of g 2 , g 3 , 37 
in r(l) are elliptic elements that generate that group. A short search finds the 
linear combination (2 — c 2 ) g3 + (c 2 + c) g7 G O of discriminant —11; computing its 
fixed point in Tt and solving for t to high precision (150 decimals, which turned 
out to be overkill), we obtain a real number whose continued fraction matches 
that of 

88983265401189332631297917 _ 7 3 43 2 127 2 139 2 207 2 659 2 11 
45974167834557869095293 ~ 3 3 13 7 83 7 ' ^ 

with numerator and denominator differing by 2 9 29 3 41 3 167 3 281 3 . Having also 
checked that this number differs from the ^-coordinates of the three non-elliptic 
CM points by products of small (< 10 4 ) primes, 11 and that it passes the super- 
singular test, we are quite confident that (85) is in fact the ^-coordinate of the 
CM point of discriminant —11. 

11 If 10 4 does not seem small, remember that the factorizations are really over K, not 
Q; the largest inert prime that occurs is 19, and the split primes are really primes 
of K of norm at most comparable with that of 19. 
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5.4 An irrational example: the algebras over Q[t]/(t 3 — 4-r + 2) 
with S — {oOj,oOj} 

While our examples so far have all been defined over Q, this is not generally the 
case for Shimura curves associated to a quaternion algebra over a totally number 
field K properly containing Q. For instance, K may not be a Galois extension 
of Q; or, K may be Galois, but the set of finite ramified places may fails to 
be Galois-stable; or, even if that set is Galois-stable, the congruence conditions 
on the subgroup of A* / K* may not be Galois-invariant, and the resulting curve 
would not be defined over Q even though X(l) would be. In each case different 
real embeddings of the field yield different arithmetic subgroups of PSL 2 (R) 
and thus different quotient curves. We give here what is probably the simplest 
example: a curve X{1) associated to a quaternion algebra with no finite ramified 
places over a totally real cubic field which is not Galois over Q. While the curve 
has genus 0, no degree-1 rational function on it takes Q-rational values at all 
four of its elliptic points, and the towers of modular curves over this X{1) are 
defined over K but not over Q. 

Let K be the cubic field Q[r]/(r 3 - 4r + 2) and discriminant 148 = 2 2 37, 
which is minimal for a totally real non-Galois field. Let A./K be a quaternion 
algebra ramified at two of the three real places and at no finite primes of K. 
Using Gp/pari to compute Of (2), we find from Shimizu's formula (78) that the 
associated Shimura curve X{1) = X*(l) has hyperbolic area .16666 . . .; thus the 
area is 1/6 and, since A is not in Takeuchi's list, the curve X(l) has genus and 
four elliptic points, one of order 3 and three of order 2. The order-3 point P3 has 
discriminant —3 as expected, but the order-2 points are a bit more interesting: 
their CM field is K(i), but the ring of integers of that field is not Ojf[j]! Note 
that the rational prime 2 is totally ramified in K, being the cube of the prime 
(t); thus (1 + i)/t is an algebraic integer, and we readily check that it generates 
the integers of K(i) over Ok- One of the elliptic points, call it P 2 , has CM ring 
Oa'[(1 + i)/t] and discriminant — 4/r 2 ; of its three (r)-isogenous points, one is 
Pi itself, and the others are the remaining elliptic points P^P^', with CM ring 
Ok[i\ of discriminant —4. 

Thus the modular curve X ((t)) is a degree-3 cover of X(l) unramificd above 
the elliptic point Pi , and ramified above the other three elliptic points with type 
3 for P 3 and 21 for P' 2 , P% '. This determines the cover up to K- isomorphism — 
the curve X ((t)) has genus 0, and we can choose coordinates x on that curve 
and t on X(l) such that f (P3) = 00 and t — x 3 — 3cx for some c 7^ — but not 
the location of the unramified point P2 relative to the other three elliptic points. 
To determine that we once again use the involution, this time u>( T ), of X ((t)): 
this involution fixes the point above Pi corresponding to its self-isogeny, and 
pairs the other two preimages of P 2 with the simple preimages of P'^Plj. We 
find that there are three ways to satisfy this condition: 

t = x 3 -3(r 2 -3)x, P 2 : t = 1300- 188t-351t 2 , P£, P'{ : t = ±2(r 2 - 3) 3/2 , 

(86) 

and its Galois conjugates. The correct choice is determined by the condition that 
the Shimura curves must be fixed by the involution of the Galois closure of K/Q 
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that switches the two real embeddings of K that ramify A: the image of r under 
the the third (split) embedding must be used in (8G). We find that the simple and 
double preimages of P'-i are x = ±2\/a 2 — 3, TVa 2 — 3, and the preimages of 
P 2 arc 12-2t-3t 2 (fixed by w {t) ) and (-12 + 2r + 3r 2 ± (3a 2 - 12)V« 2 - 3)/2. 
From this we recover as usual the tower of curves Ao((r) r ), whose reductions 
at primes of K other than t are asymptotically optimal over the quadratic 
extensions of the primes' residue fields, and which in this case is a tower of 
double (whence cyclic) covers unramificd above the genus-3 curve Ao((t) 4 ) and 
thus involved in that curve's class-field tower. 

5.5 Open problems 

Computing modular curves and covers. Given a nonempty even set E of 
rational primes, and thus a quaternion algebra A/Q, how to compute the curve 
X*(l) together with its Schwarzian equation and modular covers such as X(l) 
and Even in the simplest case £ = {2, 3} where r*(l) is a triangle group 

and all the covers Xq (l)/X* (1) are in principle determined by their ramifications, 
finding those covers seems at present a difficult problem once I gets much larger 
than the few primes we have dealt with here. This is the case even when I is 
still small enough that Xq (I) has genus small enough, say g < 5, that the curve 
should have a simple model in projective space. For instance, according to 35 
the curve X *(73) has genus 1. Thus its Jacobian is an elliptic curve; moreover it 
must be one of the six elliptic curves of conductor 6 • 73 tabulated in [C] . Which 
one of those curves it is, and which principal homogeneous space of that curve 
is isomorphic with Xq(73), can probably be decided by local methods such as 
those of [Ku]; indeed such a computation was made for Ao(ll) in D. Roberts' 
thesis [Ro]. But that still leaves the problem of finding the degree- 74 map on that 
curve which realizes the modular cover A" *(73) — > X*(l). For classical modular 
curves (i.e. with £ = 0) of comparable and even somewhat higher levels, the 
equations and covers can be obtained via g-expansions as explained in [E5]; but 
what can we do here in the absence of cusps and thus of o-cxpansions? Can we 
do anything at all once the primes in £ are large or numerous enough to even 
defeat the methods of the present paper for computing X*(l) and the location 
of the elliptic points on this curve? Again this happens while the genus of X*(l) 
is still small; for instance it seems already a difficult problem to locate the 
elliptic points on all curves X*(l) of genus zero and determine their Schwarzian 
equations, let alone find equations for all curves X*(l) of genus 1, 2, or 3. By [12] 
the existence of the involutions wi on Xq (I) always suffices in principle to answer 
these questions, but the computations needed to actually do this become difficult 
very quickly; it seems that a perspicuous way to handle these computations, or a 
new and more efficient approach, is called for. The reader will note that so far we 
have said nothing about computing with modular forms on Shimura curves. Not 
only is this an intriguing question in its own right, but solving it may also allow 
more efficient computation of Shimura curves and the natural maps between 
them, as happens in the classical modular setting. 
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In another direction, we ask: is there a prescription, analogous to (27), for 
towers of Shimura curves whose levels are powers of a ramified prime of the al- 
gebra? For a concrete example (from case III of [T]), let A be the quaternion al- 
gebra over Q(v / 2 ) with £ = {ooi, P2}, where 00 1 is one of the two Archimedean 
places and p2 is the prime ideal (v^) above 2; let O C A be a maximal order, 
I = I P2 C O the ideal of elements whose norm is a multiple of \/2, and 

r n = {[a] e OJ/{±l} : a = 1 mod /"} (87) 

for n = 0, 1, 2, ... . Then r n+ \ is a normal subgroup of r n with index 3, 2 2 , 2 
according as n = 0, n is odd, or n is even and positive. Consulting [T], we find 
that rb,A arc the triangle groups £3,3,4 and 6*4,4,4. Let X„ be the Shimura 
curve 7i/r ni which parametrizes principally polarized abclian fourfolds with 
endomorphisms by A and complete level-/" structure. Then {X n } n> o is a tower 
of Z/2 or (Z/2) 2 covers, unramified above the curve X 3 . Moreover, X n has genus 
zero for n = 0, 1, 2, while X3 is isomorphic with the curve y 2 — x 5 — x of genus 2 
with maximal automorphism group. The reduction of this tower at any prime 
P 7^ P2 °f Q(\/2) is asymptotically optimal over the quadratic extension of the 
residue field of p. So we ask for explicit recursive equations for the curves in this 
tower. Note that unlike the tower (25), this one does not seem to offer a wi or 
w P2 shortcut. 

CM points. Once we have found a Shimura modular curve together with a 
Schwarzian equation, we have seen how to compute the coordinates of CM points 
on the curve, at least as real or complex numbers to arbitrary precision. But this 
still leaves many theoretical and computational questions open. For instance, 
what form does the Gross-Zagier formula [GZ] for the difference between j- 
invariants of elliptic curves take in the context of Shimura curves such as Xq(1) 
or X(l)l Note that a factorization theorem would also yield a rigorous proof 
that our tabulated rational coordinates of CM points are correct. Our tables 
also suggest that at least for rational CM points the heights increase more or 
less regularly with D\; can this be explained and generalized to CM points of 
degree > 1? For CM points on the classical modular curve X(l) this is easy: 
a CM j-invariant is an algebraic integer, and its size depends on how close the 
corresponding point of 7i/PSL2(Z) is to the cusp; so for instance if Q(V _ D ) has 
class number 1 then the CM j-invariant of discriminant — D is a rational integer 
of absolute value exp(7ry A D) + 0(1). But such a simple explanation probably 
cannot work for Shimura curves which have neither cusps nor integrality of 
CM points. Within a commcnsurability class of Shimura curves (i.e. given the 
quaternion algebra A), the height is inversely proportional to the area of the 
curve; does this remain true in some sense when A is varied? 

As a special case we might ask: how does the minimal polynomial of a CM 
point of discriminant — D factor modulo the primes contained in D\? That the 
minimal polynomials for CM j-invariants are almost squares modulo prime fac- 
tors of the discriminant was a key component of our results on supersingular 
reduction of elliptic curves [E2,E3]: analogous results on Shimura curves may 
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likewise yield a proof that, for instance, for every t E Q there are infinitely many 
primes p such that the point on the (2, 4, 6) curve with coordinate t reduces to 
a supersingular point mod p. 

Enumeration and arithmetic of covers. When an arithmetic subgroup of 
PSL/2(R) is commensurable with a triangle group G — G p ^ q ^ r , as was the case 
for the £ = {2,3} algebra, any modular cover H/G' of H/G (for G' C G a 
congruence subgroup) is ramified above only three points on the genus-0 curve 
H/G. We readily obtain the ramification data, which leave only finitely many 
possibilities for the cover. We noted that, even when there is only one such cover, 
actually finding it can be far from straightforward; but much is known about 
covers of P 1 ramified at three points — for instance, the number of such covers 
with given Galois group and ramification can be computed by solving equations 
in the group (see [Mat]), and the cover is known [Be] to have good reduction 
at each prime not dividing the size of the group. But when G, and any group 
commensurable with it, has positive genus or more than three elliptic points, 
we were forced to introduce additional information about the cover, namely the 
existence of an involution exchanging certain prcimages of the branch points. In 
the examples we gave here (and in several others to be detailed in future work) 
this was enough to uniquely determine the cover H/G' — ► H/G. But there is 
as yet no general theory that predicts the number of solutions of this kind of 
covering problem. The arithmetic of the solutions is even more mysterious: recall 
for instance that in our final example the cubic field Q[r]/ (r 3 — At + 2) emerged 
out of conditions on the cover Xq((t)) / X '(1) in which that field, and even its 
ramified prime 37, are nowhere to be seen. 

6 Appendix: Involutions of P 1 

We collect some facts concerning involutions of the projective line over a field of 
characteristic other than 2. We do this from a representation-theoretic point of 
view, in the spirit of [FH]. That is, we identify a pair of points U = (xi : yi) (i = 
1,2) of P 1 with a binary quadric, i.e. a one-dimensional space of homogeneous 
quadratic polynomials Q{X, Y) = AX 2 + 2BXY + CY 2 , namely the polynomials 
vanishing at the two points; we regard the three-dimensional space V3 of all such 
polynomials AX 2 + 2BXY + CY 2 as a representation of the group SL 2 acting 
on P 1 by unimodular linear transformations of (X, Y). 

An invcrtiblc linear transformation of a two-dimensional vector space V2 over 
any field yields an involution of the projective line P 1 = P(V r 2 *) if and only if 
it is not proportional to the identity and its trace vanishes (the first condition 
being necessary only in characteristic 2). Over an algebraically closed field of 
characteristic other than 2, every involution of P 1 has two fixed points, and 
any two points are equivalent under the action of PSL 2 on P 1 . It is clear that 
the only involution fixing 0, 00 is t <-> — t; it follows that any pair of points 
determines a unique involution fixing those two points. Explicitly, if B 2 ^ AC, 
the involution fixing the distinct roots of AX 2 + 2BXY + CY 2 is (X : Y) <-» 
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(BX + CY : - AX -BY). Note that the 2-transitivity of PSL 2 on P 1 also means 
that this group acts transitively on the complement in the projective plane PV3 
of the conic B 2 = AC (and also acts transitively on that conic); indeed it is 
well-known that PSL 2 is just the special orthogonal group for the discriminant 
quadric B 2 - AC on V 3 . 

Now let Qi, Q 2 € V3 be two polynomials without a common zero. Then there 
is a unique involution of P 1 switching the roots of Q\ and also of Q 2 . (If Qi 
has a double zero the condition on Qi means that its zero is a fixed point of the 
involution.) This can be seen by using the automorphism group Aut(P 1 ) =PGL 2 
to map Qi to XY or Y 2 and noting that the involutions that switch t = with 
00 are t <-» a/t for nonzero a, while the involutions fixing t = 00 are t <-> a — t 
for arbitrary a. As before, we regard the involution determined in this way by 
Qi, Qi as an element of PV3. This yields an algebraic map / from (an open set 
in) PV3 x PV3, parametrizing Qi,Q 2 without common zeros, to PV3. We next 
determine this map explicitly. 

First we note that this map is covariant under the action of PSL 2 : we have 
fidQii 9Q2) = 9{f{Qi, Q2)) for any g E PSL 2 . Next we show that / has degree 1 
in each factor. Using the action of PSL 2 it is enough to show that if Q\ = XY or 
Y 2 then / is linear as a function of Q 2 = AX 2 + 2BXY + CY 2 . In the first case, 
the involution is t <-> C /At and its fixed points are the roots of AX 2 — CY 2 . 
In the second case, the involution is t <-> (-2B/A) — t with fixed points t = 00 
and t = —B/A, i.e. the roots of AXY + BY 2 . In cither case the coefficients of 
f(Qi, Q2) are indeed linear in A, B, C. 

But it turns out that these two conditions completely determine /: there is 
up to scaling a unique PSL 2 -covariant bilinear map from V3 x V3 to V3; equiv- 
alently, V3 occurs exactly once in the representation V3 ® V3 of PSL 2 . In fact it 
is known (see e.g. [FH, §11.2]) that V3 <X> V3 decomposes as V\ © V3 © V5, where 
V\ is the trivial representation and V5 is the space of homogeneous polynomi- 
als of degree 4 in X, Y. The factor V3 is particularly easy to see, because it is 
just the antisymmetric part /\ 2 V3 of V3 ® V3. Now the next-to-highest exte- 
rior power yy dlmV,_1 y f an y finite-dimensional vector space V is canonically 
isomorphic with (det V) ® V* , where det V is the top exterior power f\ lmV v. 
Taking V = V3, we see that det V3 is the trivial representation of PSL 2 . More- 
over, thanks to the invariant quadric B 2 — AC we know that V3 is self-dual as a 
PSL 2 representation. Unwinding the resulting identification /\ 2 V3 V 3 * V3, 
we find: 

Proposition A. Let Qi = AiX 2 + 2B { XY + dY 2 (i = 1,2) be two polyno- 
mials in V3 without a common zero. Then the unique involution of P 1 switching 
the roots of Qi and also of Q 2 is the involution whose fixed points are the roots 
of 

(A 1 B 2 - A 2 B 1 )X 2 + (A1C2 - A 2 d)XY + (B X C 2 - B 2 d)Y 2 , (88) 
i.e. the fractional linear transformation 

(A X C 2 - A 2 C\)t + 2(B 1 C 2 - B 2 C X ) 
2{B l A 2 -B 2 A l )t + {C 1 A 2 -C 2 A 1 y 1 ' 
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Proof: The coordinates of Q x A Q 2 for the basis of V 3 * dual to (A 2 , 2AY", Y 2 ) 
are (B 1 C 2 -B 2 C 1 , A 2 Ci-A 1 C 2 , A 1 B 2 -A 2 B 1 ). To identify V 3 * with V 3 we need 
a PSL 2 -invariant element of V® . We could get this invariant from the invariant 
quadric B 2 — AC € V 3 *® 2 , but it is easy enough to exhibit it directly: it is 



X 2 



Y 2 --2XY< 
2 



2XY + Y 2 (g)X 2 



(90) 



the generator of the kernel of the multiplication map Sym 2 (Vs) — > V5. The 
resulting isomorphism from V 3 * to V3 takes the dual basis of (X 2 ,2XY,Y 2 ) to 
(Y 2 , -XY, X 2 ), and thus takes Q 1 A Q 2 to (88) as claimed. □ 

Of course this is not the only way to obtain (89). A more "geometrical" 
approach (which ultimately amounts to the same thing) is to regard P 1 as a 
conic in P 2 . Then involutions of P 1 correspond to points p G P 2 not on the 
conic: the involution associated with p takes any point q of the conic to the 
second point of intersection of the line pq with the conic. Of course the fixed 
points are then the points q such that pq is tangent to the conic at q. Given 
Qi,Q 2 we obtain for i = 1,2 the secant of the conic through the roots of Qi, 
and then p is the intersection of those secants. 

From either of the two approaches we readily deduce 

Corollary B. Let Q t = A t X 2 + 2B t XY + C t Y 2 (i = 1,2,3) be three polyno- 
mials in V3 without a common zero. Then there is an involution of P 1 switching 
the roots of Qi for each i if and only if the determinant 



A 1 B 1 Ci 
A 2 B 2 C 2 
A3 B3 C3 



(91) 



vanishes. 

As an additional check on the formula (88), we may compute that the dis- 
criminant of that quadratic polynomial is exactly the resolvent 



dct 



(A x 2B X Ci \ 
A x 2Bx Cx 
A 2 2B 2 C 2 
\ A 2 2B 2 C 2 J 



(92) 



of Qx,Q 2 which vanishes if and only if these two polynomials have a common 
zero. 
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Corrigendum 

While I was preparing my paper (call it [SCC]) I did not have David Roberts' 
thesis [Ro] to hand. Roberts has now kindly provided a copy of [Ro]; it turns out 
that the second-hand information I had to rely on concerning the contents of 
this thesis was wrong in several details, requiring specific corrections as follows. 

I ask several times for a formula for the factorization of the differences be- 
tween the coordinates of CM points on Shimura curves analogous to the formulas 
proved Gross and Zagier for Xo(l) [GZ] and obtained experimentally by Yui and 
Zagier for singular values of the Weber functions [YZ]. Roberts had already an- 
swered this question in principle, at least for the Xq curves, by obtaining an 
arithmetic intersection formula for CM points on these curves (section 6.5 of 
[Ro]). It would still take some work to extract from it (say) an explicit factor- 
ization of the difference between two such points on a Shimura curve of genus 
zero, but the technical framework now exists. 

Roberts identified arithmetically most of the elliptic curves of conductor 60 
or less which arise as Jacobians of Shimura curves for quaternion algebras over Q 
[Ro, §7.4]. This extends considerably the list of previously computed Shimura 
curves, and includes most that arise in [SCC]. Contrary to a statement in the first 
paragraph of [SCC, §5.5], the list in Roberts' thesis does not, however, include 
the curve of conductor 66 which arises as the Jacobian of Xq (11) [ = I Uj6 in 
Roberts' notation], though it would be easy to obtain from his methods. 

In [SCC, §5. 2], the sentence preceding (76) needs some explanation: conductor 
"at most" 15 and 30 rather than exactly? In fact Jac(A?(l)) is known a priori to 
have conductor exactly 15, but Jac(Ab(2)) has factors of conductor 15 [namely 
Jac(A"(l)), from "oldforms" on Ao(2)] as well as 30; if there were no newforms 
at all on X (2) its Jacobian would consist entirely of curves of conductor 15. 
[Cf. the case of the classical modular curve X (22), whose Jacobian is isogenous 
with the square of Xo(ll).] For that matter, the fact that the conductors are thus 
bounded at all needs a reference. There are various ways of doing this; surely the 
easiest (given existing work) is to cite [Ro] for results finding (factors isogenous 
to) the Jacobians of Shimura curves inside the Jacobians of classical modular 
curves Xo(-/V), and using the known results about elliptic curves occurring in 
■UN). 

Thanks again to David Roberts for bringing these matters to my attention. 



